Fix plus egress-block set to true

linode · Apr 29, 2024 · 8480546 · 8480546
1 parent dacb914
commit 8480546
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 34 deletions.
diff --git a/.github/workflows/build_test_ci.yml b/.github/workflows/build_test_ci.yml
@@ -82,7 +82,7 @@ jobs:
       uses: step-security/harden-runner@v2
       with:
         disable-sudo: true
-        egress-policy: audit
+        egress-policy: block
         allowed-endpoints: >
           api.linode.com:443
           api.github.com:443
@@ -107,6 +107,8 @@ jobs:
           cloud.tilt.dev:443
           kubernetes-sigs.github.io:443
           charts.jetstack.io:443
+          helm.cilium.io:443
+          linode.github.io:443
 
     - uses: actions/checkout@v4
 

diff --git a/e2e/default-CAPL-cluster/assert-child-cluster-resources.yaml b/e2e/default-CAPL-cluster/assert-child-cluster-resources.yaml
@@ -50,39 +50,6 @@ kind: HelmReleaseProxy
 metadata:
   labels:
     cluster.x-k8s.io/cluster-name: ($cluster)
-    helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name: linode-cloud-controller-manager
-status:
-  conditions:
-  - type: Ready
-    status: "True"
-  - type: ClusterAvailable
-    status: "True"
-  - type: HelmReleaseReady
-    status: "True"
-  status: deployed
----
-apiVersion: addons.cluster.x-k8s.io/v1alpha1
-kind: HelmReleaseProxy
-metadata:
-  labels:
-    cluster.x-k8s.io/cluster-name: ($cluster)
-    helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name: cilium
-status:
-  conditions:
-  - type: Ready
-    status: "True"
-  - type: ClusterAvailable
-    status: "True"
-  - type: HelmReleaseReady
-    status: "True"
-  status: deployed
----
-apiVersion: addons.cluster.x-k8s.io/v1alpha1
-kind: HelmReleaseProxy
-metadata:
-  labels:
-    cluster.x-k8s.io/cluster-name: ($cluster)
-    helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name: csi-driver-linode
 status:
   conditions:
   - type: Ready