Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding warnings and solution about the configuration exposure #3790

Merged
merged 3 commits into from
Aug 20, 2018
Merged

Adding warnings and solution about the configuration exposure #3790

merged 3 commits into from
Aug 20, 2018

Conversation

dduportal
Copy link
Contributor

@dduportal dduportal commented Aug 20, 2018

What does this PR do?

This Pull Request introduces a few warnings and references in the documentation about the impact of enabling the API/Dashboard.

Motivation

Related to #3665, #3651, #3669

More

  • Added/updated documentation

Copy link
Contributor

@ldez ldez left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@nmengin nmengin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 📖

Signed-off-by: Damien DUPORTAL <damien.duportal@gmail.com>
Signed-off-by: Damien DUPORTAL <damien.duportal@gmail.com>
Copy link
Member

@juliens juliens left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👏

@@ -38,6 +41,16 @@ For more customization, see [entry points](/configuration/entrypoints/) document

![Web UI Health](/img/traefik-health.png)

## Security

Copy link
Member

@juliens juliens Aug 20, 2018

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe a sentence about "don't expose the api port publicly"?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done, thanks for the idea and feedback!

…rt restriction

Signed-off-by: Damien DUPORTAL <damien.duportal@gmail.com>
Copy link
Member

@juliens juliens left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@traefiker traefiker merged commit f062ee8 into traefik:v1.6 Aug 20, 2018
@ldez ldez changed the title Docs: Adding warnings and solution about the configuration exposure Adding warnings and solution about the configuration exposure Aug 20, 2018
@dduportal dduportal deleted the docs-api-warning-sec branch August 20, 2018 10:07
@VojtechVitek
Copy link

Backlink: https://nvd.nist.gov/vuln/detail/CVE-2018-15598

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants