fix(docker): Restrict falco-webui service to local access only#3838
fix(docker): Restrict falco-webui service to local access only#3838poiana merged 1 commit intofalcosecurity:masterfrom
Conversation
Change the port binding of the falco-webui service from public access to local access only (127.0.0.1) to enhance security. Signed-off-by: qux-bbb <1147635419@qq.com>
|
Welcome @qux-bbb! It looks like this is your first PR to falcosecurity/falco 🎉 |
|
PR looks good! Closing and re-opening this as it seems CI didn't run |
|
/reopen |
|
@ekoops: Reopened this PR. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
/close |
|
@ekoops: Closed this PR. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
/reopen |
|
@ekoops: Reopened this PR. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
LGTM label has been added. DetailsGit tree hash: 4b533bf0b380a0191be2af9174869e9910909392 |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: ekoops, leogr, qux-bbb The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Change the port binding of the falco-webui service from public access to local access only (127.0.0.1) to enhance security.
What type of PR is this?
/kind bug
Any specific area of the project related to this PR?
/area build
What this PR does / why we need it:
Restricts the falco-webui service port binding from public access to local access only (127.0.0.1) to enhance security. This ensures the web UI is only accessible from the host machine, reducing the attack surface.
Which issue(s) this PR fixes:
Fixes #
Special notes for your reviewer:
Does this PR introduce a user-facing change?:
NONE