FEAT(authelia): bypass auth for cluster internal traffic

- Add internal network definition (10.42.0.0/16, 10.43.0.0/16)
- Allow blackbox-exporter probes without authentication
- Apply bypass policy for *.kro.kr from internal networks
This commit is contained in:
2026-01-09 15:50:18 +09:00
parent c368d2e983
commit 16dd9d88aa

View File

@@ -92,6 +92,16 @@ configMap:
# Access control rules
access_control:
default_policy: one_factor
networks:
- name: internal
networks:
- 10.42.0.0/16
- 10.43.0.0/16
rules:
- domain: '*.kro.kr'
networks:
- internal
policy: bypass
# Notifier - filesystem (no email)
notifier: