feat(ql3): admit plugin secret action jobs

2026-09-22 19:29:13 +08:00 · 2026-08-14 10:22:14 +08:00
parent 75dbe7a4c4
commit 7f5339e047
27 changed files with 2019 additions and 10 deletions
@@ -21,3 +21,7 @@ metadata:
  namespace: qinglong3-system
 type: Opaque
 data: {}
+
+# The controller also needs one private-overlay NetworkPolicy patch containing
+# only the exact Kubernetes API endpoint CIDR and TCP port. Start from
+# api-server-egress-patch.example.yaml; do not permit arbitrary TCP/443 egress.