initial commit

Change-Id: I73047bb0d9c250f5107167f833e9fa7bc29501e5

config/nohttp/allowlist.lines

@@ -0,0 +1,11 @@
+// Platform-scaffolded internal cluster URLs (not reachable over HTTPS)
+// These use Kubernetes service DNS which only supports plain HTTP inside the cluster
+^http://.*\.svc\.cluster\.local.*$
+
+// OpenTelemetry collector endpoints (gRPC/HTTP on internal cluster network)
+^http://otel-collector.*$
+^http://.*otel.*$
+
+// k6 load test target URLs (internal service mesh)
+^http://frontend\..*$
+^http://localhost.*$