initial commit

Change-Id: Ic04f924550cf1df49219af9ab67c2b206054a6b8

config/nohttp/allowlist.lines

@@ -0,0 +1,11 @@
+// Platform-scaffolded internal cluster URLs (not reachable over HTTPS)
+// These use Kubernetes service DNS which only supports plain HTTP inside the cluster
+^http://.*\.svc\.cluster\.local.*$
+
+// OpenTelemetry collector endpoints (gRPC/HTTP on internal cluster network)
+^http://otel-collector.*$
+^http://.*otel.*$
+
+// k6 load test target URLs (internal service mesh)
+^http://frontend\..*$
+^http://localhost.*$