C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Bind nginx localhost proxy to localhost

Browse source 
This proxy should only be listening for local connections, not 0.0.0.0.

Fixes #868
This commit is contained in:
Matthew Mosesohn 2017-01-09 17:19:28 +03:00
parent d296284bfa
commit e9d5aa0f07
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/kubernetes/node/templates/nginx.conf.j2
View file

@ -16,7 +16,7 @@ stream {
} }
server { server {
listen {{ kube_apiserver_port }}; listen 127.0.0.1:{{ kube_apiserver_port }};
proxy_pass kube_apiserver; proxy_pass kube_apiserver;
proxy_timeout 10m; proxy_timeout 10m;
proxy_connect_timeout 1s; proxy_connect_timeout 1s;