Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure 127.0.0.1 for the --bind-address parameter #1723

Merged
merged 1 commit into from
Nov 18, 2024

Conversation

ktsakalozos
Copy link
Contributor

If --bind-address of kube-scheduler and kube-controller-manager is not set it defaults to 0.0.0.0 (all interfaces) [1, 2].

The respective checks (1.3.7 and 1.4.2) should not accept the default bind-address value and should fail if --bind-address is not set.

[1] https://kubernetes.io/docs/reference/command-line-tools-reference/kube-scheduler/
[2] https://kubernetes.io/docs/reference/command-line-tools-reference/kube-controller-manager/

@CLAassistant
Copy link

CLAassistant commented Nov 8, 2024

CLA assistant check
All committers have signed the CLA.

@ktsakalozos ktsakalozos force-pushed the fix-bind-address-check branch from ea4ec06 to 2d999ee Compare November 8, 2024 14:53
Copy link
Collaborator

@afdesk afdesk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! @ktsakalozos thanks for the contribution!

@mozillazg wdyt?

Copy link
Collaborator

@mozillazg mozillazg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, Thanks for your contribution!

@mozillazg
Copy link
Collaborator

@afdesk It seems other benchmarks may have similar issues, do we need to update the checking logic for those benchmarks as well? We can make these changes in another new PR. wdyt?

@afdesk
Copy link
Collaborator

afdesk commented Nov 15, 2024

@afdesk It seems other benchmarks may have similar issues, do we need to update the checking logic for those benchmarks as well? We can make these changes in another new PR. wdyt?

@mozillazg I agree with you. let's create a new issue.

@afdesk
Copy link
Collaborator

afdesk commented Nov 15, 2024

@ktsakalozos could you update the PR with the current main branch? thanks

@ktsakalozos ktsakalozos force-pushed the fix-bind-address-check branch from adccb29 to 9e3b808 Compare November 16, 2024 14:04
@ktsakalozos
Copy link
Contributor Author

It should be ok now @afdesk

@afdesk afdesk merged commit 39dfe93 into aquasecurity:main Nov 18, 2024
5 checks passed
@afdesk
Copy link
Collaborator

afdesk commented Nov 18, 2024

@ktsakalozos thanks again! LGTM! merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants