redpanda-data / redpanda-data/openmessaging-benchmark

Prometheus and grafana port should not be accessible from any address, only myip

Open
#66 1 comment 0 reactions 0 assignees View on GitHub

@hcoyote is already working on this.

Since Jun 2, 2023.

  • #67 by @hcoyote — open
Dominant language
Java
Stars
40
Forks
32
PR merge metrics
No merged PRs in 30d

Description

https://github.com/redpanda-data/openmessaging-benchmark/blob/8411e4a17f9fe190591389bf9b17c515f144a393/driver-redpanda/deploy/provision-redpanda-aws.tf#L176-L188

This should probably be locked down to same address as used for general access to the security group from the tester's home node.

 cidr_blocks = ["${chomp(data.http.myip.body)}/32"]

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with driver-redpanda/deploy/provision-redpanda-aws.tf lines 176-188 and compare the Prometheus and Grafana ingress rules with the security-group rule for general tester access. Restrict those ports to the tester's myip address, then verify the Terraform configuration and confirm no broader address range remains; an open linked pull request indicates this work is already underway.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, prometheus, terraform
Domain
cloud, infrastructure, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.