From ed3dd26c7207565c7102850bb0787f0b2bc60352 Mon Sep 17 00:00:00 2001
From: Ygal Blum <ygal.blum@gmail.com>
Date: Thu, 23 Apr 2026 11:47:58 -0400
Subject: [PATCH] Block external access to the `resources` endpoint

The Placement Manager's endpoints are internal only

Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
---
 config/dynamic/routes.yml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/config/dynamic/routes.yml b/config/dynamic/routes.yml
index 918f12f..865831f 100644
--- a/config/dynamic/routes.yml
+++ b/config/dynamic/routes.yml
@@ -93,12 +93,6 @@ http:
       service: policy-manager
       entryPoints: [web]
 
-    # ── PlacementManager ──────────────────────────────────────────────
-    resources-collection:
-      rule: "Path(`/api/v1alpha1/resources`) && (Method(`GET`) || Method(`POST`))"
-      service: placement-manager
-      entryPoints: [web]
-
   middlewares:
     strip-health-suffix:
       replacePathRegex: