Allow k8s edge health checks on arrstack hosts #532

Merged

benvin merged 2 commits from benvin/allow-k8s-edge-healthchecks into develop 2026-09-27 09:55:58 +10:00

Conversation 0 Commits 2 Files Changed 1

+3

unkin-agent commented 2026-09-26 18:36:01 +10:00

Member

Copy Link

Copy Source

The Kubernetes-hosted haproxy edge probes the arr/nzbget backends on /consul/health, but its traffic arrives SNATed from the node ranges rather than the DMZ edge, so nginx returns 403 and every backend health-checks down.

• Allow 198.18.21.0/24 (2.5gbe physical), 198.18.15.0/24 and 198.18.19.0/24 (node loopbacks) on the arrstack_web_healthcheck location.
• Keep 198.18.24.0/24 so the existing DMZ edge stays healthy through cutover.

The Kubernetes-hosted haproxy edge probes the arr/nzbget backends on `/consul/health`, but its traffic arrives SNATed from the node ranges rather than the DMZ edge, so nginx returns 403 and every backend health-checks down. - Allow `198.18.21.0/24` (2.5gbe physical), `198.18.15.0/24` and `198.18.19.0/24` (node loopbacks) on the `arrstack_web_healthcheck` location. - Keep `198.18.24.0/24` so the existing DMZ edge stays healthy through cutover.

unkin-agent added 1 commit 2026-09-26 18:36:01 +10:00

Allow k8s node egress range on arrstack health check 267923a0dd

unkin-agent added 1 commit 2026-09-26 20:55:09 +10:00

Allow k8s loopback and 2.5gbe ranges on arrstack health check e63cf6432d

benvin merged commit 1c01b7e6ca into develop 2026-09-27 09:55:58 +10:00

benvin deleted branch benvin/allow-k8s-edge-healthchecks 2026-09-27 09:56:00 +10:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/puppet-prod#532