SovereignCloudStack / SovereignCloudStack/cluster-stacks
:seedling: Deny access to metadata service by default
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 13
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
/kind feature
Describe the solution you'd like
We want to deny the access to the metadata service from Kubernetes by default.
Anything else you would like to add:
[Miscellaneous information that will assist in solving the issue.]
Environment:
- Kubernetes version: (use
kubectl version) - OS (e.g. from
/etc/os-release):
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the Kubernetes cluster configuration that controls network access to the OpenStack metadata service described in the issue. Determine how access is currently permitted and define done as metadata-service access being denied by default, with an appropriate verification of that behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100