ciarancrocker / traefik-github-webhook-whitelist-plugin

A middleware plugin for Traefik that whitelists HTTP connections from Github Webhooks

Traefik Github Actions IP Whitelist Plugin

A middleware plugin for Traefik that whitelists TCP connections from Github Actions or other specified addresses. The Github Actions addresses are automatically retrieved from the Gitbub Meta information endpoint .

Configuration

testData:
  additionalCIDRs:
    - 13.67.144.0/21
    - 13.67.152.0/24
    - 13.67.153.0/28

• additionalCIDRs additional CIDRs to be added in the whitelist

Example configuration

• Static configuration

pilot:
  token: <token>

experimental:
  plugins:
    github-actions-ip-whitelist:
      moduleName: github.com/vaspapadopoulos/traefik-github-actions-ip-whitelist-plugin
      version: v0.1.0

• Dynamic configuration

tcp:
  routers:
    my-service.com:
      service: my-service
      middlewares:
        - githubActionsIpWhitelist
  middlewares:
    githubActionsIpWhitelist:
      plugin:
        github-actions-ip-whitelist:
          additionalCIDRs:
            - 13.67.144.0/21
            - 13.67.152.0/24
            - 13.67.153.0/28
  services:
    my-service:
      loadBalancer:
        servers:
          - url: <url>