From 926a90508afb3080768164e1dbed1b8de4273e26 Mon Sep 17 00:00:00 2001 From: panxiao81 Date: Wed, 16 Sep 2026 15:35:38 +0000 Subject: [PATCH] =?UTF-8?q?=E5=85=81=E8=AE=B8=20Gitea=20=E6=8A=95=E9=80=92?= =?UTF-8?q?=E5=8A=A8=E6=80=81=20Runner=20=E9=9B=86=E7=BE=A4=E5=86=85=20web?= =?UTF-8?q?hook?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- apps/gitea/gitea-values.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/apps/gitea/gitea-values.yaml b/apps/gitea/gitea-values.yaml index 3496a08..77eeb4b 100644 --- a/apps/gitea/gitea-values.yaml +++ b/apps/gitea/gitea-values.yaml @@ -48,6 +48,11 @@ gitea: # github.com is reachable from this network (verified 2026-07-28) even when # pypi.org/Fastly is not — see the flaky-WAN notes in the lint workflow. DEFAULT_ACTIONS_URL: github + webhook: + # Keep the default public-internet access for existing hooks while allowing + # only the dynamic Runner controller's exact in-cluster DNS name. Do not + # broaden this to the built-in `private` network group. + ALLOWED_HOST_LIST: external,dynamic-runner-controller.dynamic-runner.svc.cluster.local mailer: # Outbound mail via the in-cluster Postfix+OAuth relay (see ../smtp-relay/). # Plain SMTP on :25 — the relay does STARTTLS + OAuth to M365. From must be the