open-platform/app-template
Template
3
0
Fork 0
Code Issues Pull requests Releases 5 Packages 2 Wiki Activity Actions

DOM-2: allowedHosts egress allowlist in chart values #5

Merged
plat merged 1 commit from feat/dom-2-allowed-hosts into main 2026-07-01 21:22:31 +00:00
Conversation 0 Commits 1 Files changed 1 +13
plat commented 2026-07-01 21:19:24 +00:00
Owner
Copy link

Part of DOM-2 (plat/mitosis#37). Adds allowedHosts: [] to charts/app/values.yaml as the app-author surface for domain-defined egress.

  • Default [] keeps the platform's blanket egress — existing apps unaffected.
  • When an app lists hostnames, the mcp overlay renderer (plat/mcp PR feat/dom-2-fqdn-egress) emits a per-app CiliumNetworkPolicy that default-denies egress and permits only those FQDNs (+ DNS / intra-ns / platform edge), enforced by Cilium.

Docs-only chart-values change; no template logic. Pairs with the mcp renderer PR.

DO NOT MERGE until GATE (orchestrator merges).

Part of DOM-2 (plat/mitosis#37). Adds `allowedHosts: []` to `charts/app/values.yaml` as the app-author surface for domain-defined egress. - Default `[]` keeps the platform's blanket egress — existing apps unaffected. - When an app lists hostnames, the mcp overlay renderer (plat/mcp PR `feat/dom-2-fqdn-egress`) emits a per-app CiliumNetworkPolicy that default-denies egress and permits only those FQDNs (+ DNS / intra-ns / platform edge), enforced by Cilium. Docs-only chart-values change; no template logic. Pairs with the mcp renderer PR. DO NOT MERGE until GATE (orchestrator merges).
DOM-2: allowedHosts egress allowlist in chart values
Some checks failed
check / check (push) Successful in 1m43s
Details
check / check (pull_request) Successful in 1m34s
Details
preview / preview (pull_request) Failing after 0s
Details
892d31977a 
Adds allowedHosts: [] to the app chart values as the app-author surface for
domain-defined egress. Default [] keeps the platform blanket egress. When set,
the mcp overlay renderer emits a per-app CiliumNetworkPolicy permitting only
these FQDNs (Cilium-enforced).
plat merged commit 65ac922e7c into main 2026-07-01 21:22:31 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
agent-work
Queue this for an agent: it will build it and open a PR

  
agent-working
An agent is actively working on this

  
ultracode
Operators: run a Fable ultracode orchestrator on this issue

No labels
agent-work
agent-working
ultracode
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
open-platform/app-template!5
No description provided.