fix(ingress): add localhost to rate-limit bypass CIDRs

Adds 127.0.0.0/8 and ::1/128 so host-networked pods (buildkitd) are not blocked by the detection pipeline.
2026-03-09 01:40:25 +00:00
parent 27d3e3248c
commit a101ea4b06
1 changed files with 1 additions and 1 deletions
--- a/base/ingress/pingora-config.yaml
+++ b/base/ingress/pingora-config.yaml
@@ -67,7 +67,7 @@ data:
    enabled                = true
    eviction_interval_secs = 300
    stale_after_secs       = 600
-    bypass_cidrs           = ["10.42.0.0/16"]
+    bypass_cidrs           = ["10.42.0.0/16", "127.0.0.0/8", "::1/128"]

    [rate_limit.authenticated]
    burst = 200