m-lab / etl

M-Lab ingestion pipeline
Apache License 2.0
22 stars 7 forks source link

Place all public accessible service ports for GKE services behind oauth proxy #1095

Open stephen-soltesz opened 2 years ago

stephen-soltesz commented 2 years ago

Our federation monitoring stack uses oauth proxy to provide access control to services with public addresses.

Some ports in the Gardener and Parser are technically publicly accessible (but not advertised). Though these addresses should not be generally accessible. They should be behind a similar oauth proxy.