I got a VPN protected internal GitLab cluster deployment with a Classic Load Balancer in front.
I need to allow a webhook from Github and only Github to pass through (the