Infrastructure is defined as a helm charts under apps/
The charts are continuously synced to Hasadna cluster via ArgoCD as defined here.
Some operations have to run from allowed IPs on Knesset. The following command updates the node labels according to the latest requested allowed IPs:
python3 bin/update_node_allowed_ips.py
If you need to request or change the allowed IPs, edit that file and set the ALLOWED_IPS constant.
To test make requests from the node allowed IPs, use our socks proxy, get the username/password from vault Projects/oknesset/k8s-secrets: dante-username / dante-password:
curl -x socks5://username:password@ingress.hasadna.org.il:30378 https://example.com