---
title: IP allowlisting
slug: ip-allowlisting
createdAt: 2026-02-24T04:04:26.323Z
---

### For environments enforcing outbound restrictions

- Publish Kubegrade egress destination IPs/CIDRs (if static)
- Or publish endpoint domains with certificate pinning guidance
- Document IP rotation/change notification policy
- Provide separate lists for SaaS regions if applicable



### For inbound (if any webhooks/callbacks used)

- Publish Kubegrade source IPs for webhook delivery