Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable inverse proxy to access host network #2614

Merged
merged 1 commit into from
Nov 18, 2019
Merged

Enable inverse proxy to access host network #2614

merged 1 commit into from
Nov 18, 2019

Commits on Nov 15, 2019

  1. Enable inverse proxy to access host network 

    When switching to GKE workload identity, the pods can't access to metadata server anymore by default due to metadata concealment. 
This can be unlocked by explicitly enable hostnetwork for the pod. 
https://cloud.google.com/kubernetes-engine/docs/how-to/protecting-cluster-metadata#concealment

This should be OK as proxy is an optional component. In any case when user feel this not a secure option he/she could opt out it.
    @IronPan
    IronPan authored Nov 15, 2019
    Configuration menu
    Copy the full SHA
    13dcda1 View commit details
    Browse the repository at this point in the history