initial commit

Change-Id: I65341edf60d9ace4a4d0c05e2689cf0f23a8db67

config/nohttp/allowlist.lines

@@ -0,0 +1,11 @@
+// Platform-scaffolded internal cluster URLs (not reachable over HTTPS)
+// These use Kubernetes service DNS which only supports plain HTTP inside the cluster
+^http://.*\.svc\.cluster\.local.*$
+
+// OpenTelemetry collector endpoints (gRPC/HTTP on internal cluster network)
+^http://otel-collector.*$
+^http://.*otel.*$
+
+// k6 load test target URLs (internal service mesh)
+^http://frontend\..*$
+^http://localhost.*$