search

aws / amazon-ecs-init

Amazon Elastic Container Service RPM
http://aws.amazon.com/ecs
Apache License 2.0
199 stars 118 forks source link

primary network interface configurable for offhost introspection block #442

Closed sharanyad closed 2 years ago

sharanyad commented 2 years ago

Summary

addresses https://github.com/aws/amazon-ecs-init/issues/440

Implementation details

Introduce config variable ECS_OFFHOST_INTROSPECTION_INTERFACE_NAME to specify the primary network interface name to block offhost introspection access.

Testing

New tests cover the changes: yes

Description for the changelog

Introduce new configuration variable ECS_OFFHOST_INTROSPECTION_INTERFACE_NAME to specify the primary network interface name for setting iptables rules to block offhost agent introspection port access.

Licensing

This contribution is under the terms of the Apache 2.0 License: yes