scl/kubespray
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bind nginx localhost proxy to localhost

Browse Source 
This proxy should only be listening for local connections, not 0.0.0.0.

Fixes #868
This commit is contained in:
Matthew Mosesohn
2017-01-09 17:19:28 +03:00
parent 091b634ea1
commit e22f938ae5
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/kubernetes/node/templates/nginx.conf.j2
View File

@ -16,7 +16,7 @@ stream {
} }
server { server {
listen {{ kube_apiserver_port }}; listen 127.0.0.1:{{ kube_apiserver_port }};
proxy_pass kube_apiserver; proxy_pass kube_apiserver;
proxy_timeout 10m; proxy_timeout 10m;
proxy_connect_timeout 1s; proxy_connect_timeout 1s;