Skip to content

Commit 764f9c9

Browse files
authored
Revert "fix: restore cluster_pods network policy for nemoclaw and openclaw (#25)" (#26)
This reverts commit 7335566.
1 parent 7335566 commit 764f9c9

File tree

2 files changed

+1
-25
lines changed

2 files changed

+1
-25
lines changed

sandboxes/nemoclaw/policy.yaml

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -127,16 +127,3 @@ network_policies:
127127
- { path: /usr/local/bin/claude }
128128
- { path: /usr/bin/gh }
129129

130-
# --- Private network access (allowed_ips) ---
131-
# Allows any binary to reach services on the k3s cluster pod network
132-
# (10.42.0.0/16). Without allowed_ips, the proxy's SSRF check blocks
133-
# all connections to private RFC 1918 addresses.
134-
cluster_pods:
135-
name: cluster-pods
136-
endpoints:
137-
- port: 8080
138-
allowed_ips:
139-
- "10.42.0.0/16"
140-
binaries:
141-
- { path: "/**" }
142-

sandboxes/openclaw/policy.yaml

Lines changed: 1 addition & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -126,18 +126,7 @@ network_policies:
126126
- { path: /usr/local/bin/claude }
127127
- { path: /usr/bin/gh }
128128

129-
# --- Private network access (allowed_ips) ---
130-
# Allows any binary to reach services on the k3s cluster pod network
131-
# (10.42.0.0/16). Without allowed_ips, the proxy's SSRF check blocks
132-
# all connections to private RFC 1918 addresses.
133-
cluster_pods:
134-
name: cluster-pods
135-
endpoints:
136-
- port: 8080
137-
allowed_ips:
138-
- "10.42.0.0/16"
139-
binaries:
140-
- { path: "/**" }
129+
141130

142131
inference:
143132
allowed_routes:

0 commit comments

Comments
 (0)