From 7237972b80931fb08161b14bc61085b0633560c1 Mon Sep 17 00:00:00 2001 From: Dario Tranchitella Date: Fri, 18 Jun 2021 15:24:41 +0200 Subject: [PATCH] fix: using /32 in case of bare IPs --- pkg/webhook/services/validating.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkg/webhook/services/validating.go b/pkg/webhook/services/validating.go index 10c955e8..31ff9422 100644 --- a/pkg/webhook/services/validating.go +++ b/pkg/webhook/services/validating.go @@ -79,6 +79,9 @@ func (r *handler) handleService(ctx context.Context, clt client.Client, decoder } for _, allowed := range tnt.Spec.ExternalServiceIPs.Allowed { + if !strings.Contains(string(allowed), "/") { + allowed += "/32" + } _, allowedIP, _ := net.ParseCIDR(string(allowed)) for _, externalIP := range svc.Spec.ExternalIPs { IP := net.ParseIP(externalIP)