ci: update egress for hf

Signed-off-by: Sertac Ozercan <[email protected]>
sozercan · Feb 12, 2024 · 5b88b55 · 5b88b55
1 parent fd5dd75
commit 5b88b55
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 5 deletions.
diff --git a/.github/workflows/test-docker.yaml b/.github/workflows/test-docker.yaml
@@ -43,7 +43,7 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             auth.docker.io:443
-            cdn-lfs.huggingface.co:443
+            *.huggingface.co:443
             cdn.dl.k8s.io:443
             dl.k8s.io:443
             download.docker.com:443
@@ -138,4 +138,3 @@ jobs:
           path: |
             /tmp/*.log
             /tmp/images/*.png
-
diff --git a/.github/workflows/test-kubernetes.yaml b/.github/workflows/test-kubernetes.yaml
@@ -37,7 +37,7 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             auth.docker.io:443
-            cdn-lfs.huggingface.co:443
+            *.huggingface.co:443
             cdn.dl.k8s.io:443
             dl.k8s.io:443
             download.docker.com:443

diff --git a/.github/workflows/update-models.yaml b/.github/workflows/update-models.yaml
@@ -50,12 +50,12 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             auth.docker.io:443
-            cdn-lfs.huggingface.co:443
+            *.huggingface.co:443
             fulcio.sigstore.dev:443
             gcr.io:443
             ghcr.io:443
             github.com:443
-            *.huggingface.co:443
+            huggingface.co:443
             *.githubusercontent.com:443
             production.cloudflare.docker.com:443
             registry-1.docker.io:443