From 8ea58cb6c1d628f0551bb5b99e82e17d50defb21 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Fri, 16 Oct 2026 23:09:20 +1100 Subject: [PATCH] Allow the bne dmz vpc in the resolver dmz acl (#554) The second mail edge site moves to BinaryLane Brisbane (VPC 172.18.32.0/24), whose hosts resolve through the internal resolvers over the vpn. - add 172.18.32.0/24 to acl-dmz Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/554 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- apps/base/bind-internal/resolvers/acls.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/apps/base/bind-internal/resolvers/acls.yaml b/apps/base/bind-internal/resolvers/acls.yaml index 218a1c4..a9c8c9f 100644 --- a/apps/base/bind-internal/resolvers/acls.yaml +++ b/apps/base/bind-internal/resolvers/acls.yaml @@ -40,6 +40,7 @@ spec: - 198.18.24.0/24 - 172.18.30.0/24 # BinaryLane DMZ VPC syd (mail edge, via VPN) - 172.18.31.0/24 # BinaryLane DMZ VPC mel (mail edge, via VPN) + - 172.18.32.0/24 # BinaryLane DMZ VPC bne (mail edge, via VPN) --- apiVersion: bind.unkin.net/v1alpha1 kind: BindACL