Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[wip] remove insecure listen address #186

Closed
wants to merge 2 commits into from

Conversation

ibihim
Copy link
Collaborator

@ibihim ibihim commented Aug 4, 2022

Offering authn / authz to an insecure server is risky.

The benefits vs risks are easier debugging vs potential for an insecure auth-handling-proxy. The risk outweigh the benefits.

Ref Issue

Signed-off-by: Krzysztof Ostrowski kostrows@redhat.com

Signed-off-by: Krzysztof Ostrowski <kostrows@redhat.com>
@s-urbaniak
Copy link
Collaborator

We can't merge this as is unfortunately, we'd break the CLI API. What we should do instead:

  • officially deprecate the CLI setting
  • have log warnings saying this is deprecated
  • create an issue that outlines the deprecation and wil break once this will be moved to sig-auth

@ibihim ibihim mentioned this pull request Aug 8, 2022
15 tasks
Signed-off-by: Krzysztof Ostrowski <kostrows@redhat.com>
@ibihim
Copy link
Collaborator Author

ibihim commented Aug 9, 2022

Will be reopened, once we close in on its merge.

@ibihim ibihim reopened this Aug 18, 2022
@ibihim ibihim changed the title remove insecure listen address [v1][wip] remove insecure listen address Aug 18, 2022
@ibihim ibihim changed the title [v1][wip] remove insecure listen address [wip] remove insecure listen address Aug 26, 2022
@ibihim ibihim added the v1 label Aug 26, 2022
@ibihim
Copy link
Collaborator Author

ibihim commented Aug 26, 2022

Will be merged into v1 branch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants