Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Load balancer allowed CIDR is ignored during cluster provisioning #454

Open
andrewbonney opened this issue Nov 11, 2024 · 0 comments
Open

Comments

@andrewbonney
Copy link
Contributor

Magnum UI surfaces an 'Allowed CIDR' label for the tenant cluster's k8s API access. magnum-cluster-api doesn't support this label, but given that it is silently ignored, this could give tenants a false sense of security with regard to their cluster's control plane, potentially leaving it open to all Internet traffic.

For the time being in our own deployment, we have added a check to validate_cluster in utils.py which prevents users launching clusters which make use of floating IPs against their control nodes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant