From 9a38cacf5426817c199b3a7f6ce0ba07cfd12c92 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Fri, 16 Oct 2026 21:52:33 +1100 Subject: [PATCH] Move resolver DMZ ACL to the RFC 1918 mail VPC ranges (#551) BinaryLane only accepts RFC 1918 VPC ranges, so the syd and mel mail DMZ VPCs move from 198.18.30.0/24 and 198.18.31.0/24 to 172.18.30.0/24 and 172.18.31.0/24. - replace the 198.18.30-31.0/24 entries in acl-dmz with 172.18.30.0/24 and 172.18.31.0/24 Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/551 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- apps/base/bind-internal/resolvers/acls.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/base/bind-internal/resolvers/acls.yaml b/apps/base/bind-internal/resolvers/acls.yaml index f3f935f..218a1c4 100644 --- a/apps/base/bind-internal/resolvers/acls.yaml +++ b/apps/base/bind-internal/resolvers/acls.yaml @@ -38,8 +38,8 @@ spec: clusterRef: bind-resolvers entries: - 198.18.24.0/24 - - 198.18.30.0/24 # BinaryLane DMZ VPC syd (mail edge, via VPN) - - 198.18.31.0/24 # BinaryLane DMZ VPC mel (mail edge, via VPN) + - 172.18.30.0/24 # BinaryLane DMZ VPC syd (mail edge, via VPN) + - 172.18.31.0/24 # BinaryLane DMZ VPC mel (mail edge, via VPN) --- apiVersion: bind.unkin.net/v1alpha1 kind: BindACL