| # This ServiceEntry exposes the hosts needed for github.com. |
| # After applying this file, Istio-enabled pods will be able to execute |
| # `git clone https://github.com/istio/api.git` and (with local identification |
| # config and certificate) `git clone git@github.com:istio/api.git` |
| |
| # HTTP and TLS, the host must be specified |
| # See https://istio.io/docs/tasks/traffic-management/egress/ |
| apiVersion: networking.istio.io/v1alpha3 |
| kind: ServiceEntry |
| metadata: |
| name: github-https |
| spec: |
| hosts: |
| - github.com |
| ports: |
| - number: 443 |
| name: https |
| protocol: HTTPS |
| --- |
| # For TCP services the IP ranges SHOULD be specified to avoid problems |
| # if multiple SEs use the same port number. |
| # See https://istio.io/blog/2018/egress-tcp/#mesh-external-service-entry-for-an-external-mysql-instance |
| apiVersion: networking.istio.io/v1alpha3 |
| kind: ServiceEntry |
| metadata: |
| name: github-tcp |
| spec: |
| hosts: |
| - dummy.github.com # not used |
| addresses: # from https://help.github.com/articles/about-github-s-ip-addresses/ |
| - "13.229.188.59/32" |
| - "13.250.177.223/32" |
| - "140.82.112.0/20" |
| - "18.194.104.89/32" |
| - "18.195.85.27/32" |
| - "185.199.108.0/22" |
| - "185.199.108.153/32" |
| - "185.199.109.153/32" |
| - "185.199.110.153/32" |
| - "185.199.111.153/32" |
| - "192.30.252.0/22" |
| - "192.30.252.153/32" |
| - "192.30.252.154/32" |
| - "23.20.92.3/32" |
| - "35.159.8.160/32" |
| - "52.74.223.119/32" |
| - "54.166.52.62/32" |
| - "54.87.5.173/32" |
| ports: |
| - name: tcp |
| number: 22 |
| protocol: tcp |
| location: MESH_EXTERNAL |
