From fa8e016a4b38afeedfcdfb0675133b1e265edce2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ond=C5=99ej=20Poho=C5=99elsk=C3=BD?= <opohorel@redhat.com>
Date: Fri, 4 Sep 2026 15:28:14 +0200
Subject: [PATCH] Allow egress to gitweb.git.savannah.gnu.org

Savannah patch URLs redirect to gitweb.git.savannah.gnu.org.
Explicitly allow this hostname to prevent the egress firewall from
blocking redirected patch downloads.
---
 openshift/tenant-egress.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/openshift/tenant-egress.yml b/openshift/tenant-egress.yml
index c252fac6..8220b639 100644
--- a/openshift/tenant-egress.yml
+++ b/openshift/tenant-egress.yml
@@ -120,6 +120,9 @@ spec:
     - type: Allow
       to:
         dnsName: cgit.git.savannah.gnu.org
+    - type: Allow
+      to:
+        dnsName: gitweb.git.savannah.gnu.org
     # sourceware.org — upstream git for glibc, binutils, elfutils, newlib, etc.
     # Resolves to 38.145.34.32 (Cogent); not covered by existing CIDRs.
     - type: Allow