initial commit

Change-Id: I5cbee0a1a6543db2f1d21fbe656e72aa8b152994

config/nohttp/allowlist.lines

@@ -0,0 +1,11 @@
+// Platform-scaffolded internal cluster URLs (not reachable over HTTPS)
+// These use Kubernetes service DNS which only supports plain HTTP inside the cluster
+^http://.*\.svc\.cluster\.local.*$
+
+// OpenTelemetry collector endpoints (gRPC/HTTP on internal cluster network)
+^http://otel-collector.*$
+^http://.*otel.*$
+
+// k6 load test target URLs (internal service mesh)
+^http://frontend\..*$
+^http://localhost.*$