Context:
In the current implementation, many functions have ingress_settings set to ALLOW_ALL. This setting potentially introduces security and network-related concerns that need to be investigated.
Should we consider restricting the ingress_settings to a more secure configuration, such as ALLOW_INTERNAL_AND_GCLB? This change would limit access to only internal and Google Cloud Load Balancer traffic, reducing potential security risks.
Context:
In the current implementation, many functions have
ingress_settings
set toALLOW_ALL
. This setting potentially introduces security and network-related concerns that need to be investigated.Should we consider restricting the
ingress_settings
to a more secure configuration, such asALLOW_INTERNAL_AND_GCLB
? This change would limit access to only internal and Google Cloud Load Balancer traffic, reducing potential security risks.Originally suggested by @davidgamez in PR #713 discussion.