You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Security scans caught a metrics endpoint on our stack exposed on the node IP. One solution that we found to mitigate this was to override the hostnetwork parameter on the chart, after which the service endpoint is not exposed outside anymore.
Describe the solution you'd like.
The ask is for documentation/clarification for us to understand what the repercussions of this override will be on functionality, other than not exposing the endpoint on the node IP, and why it is on the host network by default.
If the component does need access to the host network to function properly, an ideal solution would be to have it access host network for monitoring but expose the port only internally(not on a node IP)
Is your feature request related to a problem ?
Security scans caught a metrics endpoint on our stack exposed on the node IP. One solution that we found to mitigate this was to override the hostnetwork parameter on the chart, after which the service endpoint is not exposed outside anymore.
Describe the solution you'd like.
The ask is for documentation/clarification for us to understand what the repercussions of this override will be on functionality, other than not exposing the endpoint on the node IP, and why it is on the host network by default.
If the component does need access to the host network to function properly, an ideal solution would be to have it access host network for monitoring but expose the port only internally(not on a node IP)
Describe alternatives you've considered.
n/a
Additional context.
Looking for some clarity on this ask #4190 (comment)
The text was updated successfully, but these errors were encountered: