From 822d50b07d31055b3f384cedffa182a6a3abd05b Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Tue, 13 Oct 2026 21:32:11 +1100 Subject: [PATCH] Allow BinaryLane DMZ VPCs in resolver ACL (#545) The mail edge VMs in the BinaryLane DMZ VPCs query the internal resolvers over the VPN, but the resolver match-clients ACLs do not include their ranges. - add 198.18.30.0/24 (syd) and 198.18.31.0/24 (mel) to `acl-dmz` Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/545 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- apps/base/bind-internal/resolvers/acls.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/apps/base/bind-internal/resolvers/acls.yaml b/apps/base/bind-internal/resolvers/acls.yaml index 05a7f4f..f3f935f 100644 --- a/apps/base/bind-internal/resolvers/acls.yaml +++ b/apps/base/bind-internal/resolvers/acls.yaml @@ -38,6 +38,8 @@ spec: clusterRef: bind-resolvers entries: - 198.18.24.0/24 + - 198.18.30.0/24 # BinaryLane DMZ VPC syd (mail edge, via VPN) + - 198.18.31.0/24 # BinaryLane DMZ VPC mel (mail edge, via VPN) --- apiVersion: bind.unkin.net/v1alpha1 kind: BindACL