Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: don't rewrite 127 to 0.0.0.0 #1051

Merged
merged 1 commit into from
Sep 20, 2021
Merged

Conversation

sparkoo
Copy link
Member

@sparkoo sparkoo commented Sep 16, 2021

Signed-off-by: Michal Vala mvala@redhat.com

What does this PR do?

Don't replace 127.0.0.1. It is not secure to listen on all interfaces. After merging eclipse-che/che-operator#1045 it is no longer needed.

Screenshot/screencast of this PR

What issues does this PR fix or reference?

eclipse-che/che#20482

How to test this PR?

image quay.io/mvala/che-plugin-registry:theiaSec

  1. deploy che with devworkspaces and plugin-registry ^
  2. start a workspace
  3. check theia really listens on 127.0.0.1

PR Checklist

As the author of this Pull Request I made sure that:

Reviewers

Reviewers, please comment how you tested the PR when approving it.

@github-actions
Copy link

Click here to review and test in web IDE: Contribute

@sparkoo sparkoo changed the title don't rewrite 127 to 0.0.0.0 fix: don't rewrite 127 to 0.0.0.0 Sep 16, 2021
Signed-off-by: Michal Vala <mvala@redhat.com>
@github-actions
Copy link

Click here to review and test in web IDE: Contribute

@benoitf
Copy link
Contributor

benoitf commented Sep 16, 2021

would it be an issue in pure DevWorkspace (where there is no all that gateways ?)

@sparkoo
Copy link
Member Author

sparkoo commented Sep 16, 2021

would it be an issue in pure DevWorkspace (where there is no all that gateways ?)

yes, Theia won't be reachable then as it will listen on 127.0.0.1 only.

@benoitf
Copy link
Contributor

benoitf commented Sep 17, 2021

FYI @sleshchenko standalone DW won't be able anymore to use the devfiles from che plug-in registry

Copy link
Member

@sleshchenko sleshchenko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested DevWorkspace created with PR's registry and works fine

@openshift-ci
Copy link

openshift-ci bot commented Sep 20, 2021

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: benoitf, sleshchenko, sparkoo

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@benoitf
Copy link
Contributor

benoitf commented Sep 20, 2021

@sleshchenko you're able to open a terminal inside che-theia ? with only DevWorkspace operator ?

@sparkoo sparkoo merged commit c7c6702 into eclipse-che:main Sep 20, 2021
@sparkoo sparkoo deleted the theiaSec branch September 20, 2021 09:10
@benoitf
Copy link
Contributor

benoitf commented Sep 20, 2021

typescript error is not related to this change, safe to merge

@che-bot che-bot added this to the 7.37 milestone Sep 20, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants