DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Only bind localhost for healthz and default server

Browse source
This commit is contained in:
danielqsj 2017-08-23 14:40:09 +08:00
parent 85dbc93e4b
commit 7bf0e2f507
1 changed files with 3 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
controllers/nginx/rootfs/etc/nginx/template/nginx.tmpl
View file

@ -361,18 +361,8 @@ http {
# Use the port 18080 (random value just to avoid known ports) as default port for nginx.
# Changing this value requires a change in:
# https://github.com/kubernetes/ingress/blob/master/controllers/nginx/pkg/cmd/controller/nginx.go
{{ range $address := $all.Cfg.BindAddressIpv4 }}
listen {{ $address }}:18080 default_server reuseport backlog={{ $all.BacklogSize }};
{{ else }}
listen 18080 default_server reuseport backlog={{ $all.BacklogSize }};
{{ end }}
{{ if $IsIPV6Enabled }}
{{ range $address := $all.Cfg.BindAddressIpv6 }}
listen {{ $address }}:18080 default_server reuseport backlog={{ $all.BacklogSize }};
{{ else }}
listen [::]:18080 default_server reuseport backlog={{ $all.BacklogSize }};
{{ end }}
{{ end }}
listen 127.0.0.1:18080 default_server reuseport backlog={{ $all.BacklogSize }};
{{ if $IsIPV6Enabled }}listen [::1]:18080 default_server reuseport backlog={{ .BacklogSize }};{{ end }}
set $proxy_upstream_name "-";
location {{ $healthzURI }} {
@ -415,11 +405,7 @@ http {
# default server for services without endpoints
server {
{{ range $address := $all.Cfg.BindAddressIpv4 }}
listen {{ $address }}:8181;
{{ else }}
listen 8181;
{{ end }}
listen 127.0.0.1:8181;
set $proxy_upstream_name "-";
location / {