Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Only allow webserver to request from the worker log server #16754

Merged
merged 2 commits into from Jul 1, 2021
Merged

Only allow webserver to request from the worker log server #16754

merged 2 commits into from Jul 1, 2021

Commits on Jul 1, 2021

  1. Only allow webserver to request from the worker log server 

    Logs _shouldn't_ contain any sensitive info, but they often do by
mistake. As an extra level of protection we shouldn't allow anything
other than the webserver to access the logs.

(We can't change the bind IP form 0.0.0.0 as for it to be useful it
needs to be accessed from different hosts -- i.e. the webserver will
almost always be on a different node)
    @ashb
    ashb committed Jul 1, 2021
    Copy the full SHA
    d772f38 View commit details
    Browse the repository at this point in the history

  2. fixup! Only allow webserver to request from the worker log server

    @ashb
    ashb committed Jul 1, 2021
    Copy the full SHA
    2726551 View commit details
    Browse the repository at this point in the history