We need a reliable tunnel between CI on AWS and CI on OVH.
Here, it is packages.nuxeo.com that needs to access mavenin.nuxeo.com and mavenpriv.nuxeo.com
A VPN would be fine.
Else, we need to allow a static range of IPs.
The solution cannot be to manually dynamic IP per node (packages.nuxeo.com is a cluster ran by Kubernetes).