Aleksei Sviridkin 4570672186 fix(cilium): deny world ingress to etcd's HTTP port on Talos v1.14 ...

Talos v1.14 serves etcd's /metrics, /health and gRPC-gateway JSON API
on a dedicated listener on 2383 instead of the client port, and its
release notes ask for 2383 to be blocked wherever 2379 was. The host
policy denied 2379 and 2380 to world, so on v1.14 nodes the JSON KV
API would be reachable from outside behind client mTLS alone.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-09-30 04:23:38 +03:00

..

templates

fix(cilium): deny world ingress to etcd's HTTP port on Talos v1.14

2026-09-30 04:23:38 +03:00

tests

fix(cilium): deny world ingress to etcd's HTTP port on Talos v1.14

2026-09-30 04:23:38 +03:00

Chart.yaml

Fix CiliumNetworkPolicy depends on cilium (#745)

2025-04-03 00:21:13 +02:00

Makefile

chore(metallb): bump to v0.16.1 and rotate host-network port denylist

2026-05-29 11:07:19 +03:00