canonical / canonical/hardware-observer-operator

Change default bind address to localhost for all exporters

Open
#473 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
20
Forks
18
Avg merge
1d 5h
Merged PRs (30d)
3

Description

### Description

For the security concern, we should bind all exporter to localhost only.
Ex: https://github.com/canonical/hardware-observer-operator/pull/463

- [ ] DCGMExporter
- [ ] HardwareExporter

### Charm revision

latest/stable

### Juju version

any

### Cloud

_No response_

### Expected behaviour

Default binding address should be localhost only

### Reproduce / Test

Install the hardware-observer charm and check the binding address and port of all exporters.

### Notes & References

_No response_

Contributor guide

Open the contributing guide

Research direction

Install the hardware-observer charm and inspect how the DCGMExporter and HardwareExporter binding addresses are configured. Check each exporter’s listening address and port, then verify that every exporter defaults to localhost only, as described in the expected behaviour and the linked reference.

Written by the indexing model from the issue text.

Assessment

Tech stack
prometheus, python
Domain
devops, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.