Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

*: mitigate DNS rebinding attacks in insecure etcd server #9372

Merged
merged 9 commits into from
Mar 1, 2018
Merged

*: mitigate DNS rebinding attacks in insecure etcd server #9372

merged 9 commits into from
Mar 1, 2018

Commits on Mar 1, 2018

  1. pkg/httputil: add "GetHostname" 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    418bb92 View commit details
    Browse the repository at this point in the history

  2. embed: add "HostWhitelist" 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    00c1f16 View commit details
    Browse the repository at this point in the history

  3. etcdmain: add "--host-whitelist" flag 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    0179d81 View commit details
    Browse the repository at this point in the history

  4. etcdserver: add "HostWhitelist" to "ServerConfig" 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    3648649 View commit details
    Browse the repository at this point in the history

  5. embed: enforce client origin policy 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    8edaeca View commit details
    Browse the repository at this point in the history

  6. hack/scripts-dev/docker-dns: add "--host-whitelist" tests 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    e9969aa View commit details
    Browse the repository at this point in the history

  7. CHANGELOG: add "--host-whitelist" change 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    d28c092 View commit details
    Browse the repository at this point in the history

  8. Documentation/op-guide: document "--host-whitelist" 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    02217cb View commit details
    Browse the repository at this point in the history

  9. *: do not whitelist empty hosts 

    Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
    @gyuho
    gyuho committed Mar 1, 2018
    Configuration menu
    Copy the full SHA
    9f0027d View commit details
    Browse the repository at this point in the history