redhat-gpe / rhte2018_api_mgmt_and_service_mesh

2 stars 3 forks source link

Egress route allows for outbound calls to both system-provider and backend-listener #22

Open jbride opened 6 years ago

jbride commented 6 years ago

Section 3.3 has the student set a custom egress route to allow polling of configs from remote system-provider API Manager. Interestingly, an authrep GET request to the backend-listener of API Manager also becomes accessible even though the egress route is specific to the system-provider.

Would be interesting to better understand why access to the backend-listener is allowed. Its not a show-stopper for the lab.
Chances are students won't even notice this is occurring.