Limit access to scheduler dashboards to authenticated users
Open
- Dominant language
- Python
- Stars
- 148
- Forks
- 93
- PR merge metrics
- No merged PRs in 30d
Description
Hello,
I have successfully proxied dask-gateway through Jupyterhub, (ala daskhub, with traefik ingress being of type `CLusterIP`) and dask scheduler dashboards are available on URLs of the type
```
https://my-domain.com/services/dask-gateway/clusters/xxx.yyy/status
```
Such URLs seem to be publicly accessible: is this intended? the URLs are hard to guess, but shouldn't dask-gateway only allow users authenticated to jupyterhub to connect to the dashboards?
Thanks in advance
Olivier
Contributor guide
Assessment
This issue has not been assessed yet.