54 lines
1.5 KiB
YAML
54 lines
1.5 KiB
YAML
# This ServiceEntry exposes the hosts needed for github.com.
|
|
# After applying this file, Istio-enabled pods will be able to execute
|
|
# `git clone https://github.com/istio/api.git` and (with local identification
|
|
# config and certificate) `git clone git@github.com:istio/api.git`
|
|
|
|
# HTTP and TLS, the host must be specified
|
|
# See https://istio.io/docs/tasks/traffic-management/egress/
|
|
apiVersion: networking.istio.io/v1alpha3
|
|
kind: ServiceEntry
|
|
metadata:
|
|
name: github-https
|
|
spec:
|
|
hosts:
|
|
- github.com
|
|
ports:
|
|
- number: 443
|
|
name: https
|
|
protocol: HTTPS
|
|
---
|
|
# For TCP services the IP ranges SHOULD be specified to avoid problems
|
|
# if multiple SEs use the same port number.
|
|
# See https://istio.io/blog/2018/egress-tcp/#mesh-external-service-entry-for-an-external-mysql-instance
|
|
apiVersion: networking.istio.io/v1alpha3
|
|
kind: ServiceEntry
|
|
metadata:
|
|
name: github-tcp
|
|
spec:
|
|
hosts:
|
|
- dummy.github.com # not used
|
|
addresses: # from https://help.github.com/articles/about-github-s-ip-addresses/
|
|
- "13.229.188.59/32"
|
|
- "13.250.177.223/32"
|
|
- "140.82.112.0/20"
|
|
- "18.194.104.89/32"
|
|
- "18.195.85.27/32"
|
|
- "185.199.108.0/22"
|
|
- "185.199.108.153/32"
|
|
- "185.199.109.153/32"
|
|
- "185.199.110.153/32"
|
|
- "185.199.111.153/32"
|
|
- "192.30.252.0/22"
|
|
- "192.30.252.153/32"
|
|
- "192.30.252.154/32"
|
|
- "23.20.92.3/32"
|
|
- "35.159.8.160/32"
|
|
- "52.74.223.119/32"
|
|
- "54.166.52.62/32"
|
|
- "54.87.5.173/32"
|
|
ports:
|
|
- name: tcp
|
|
number: 22
|
|
protocol: tcp
|
|
location: MESH_EXTERNAL
|