satoshipay / stellar-helm-charts

Helm charts for Stellar applications (Core, Horizon, Friendbot, ...)
Apache License 2.0
10 stars 11 forks source link

Optionally expose /info of HTTP service #7

Open andrenarchy opened 5 years ago

andrenarchy commented 5 years ago

The /info endpoint of Stellar Core's HTTP API is safe to expose and provides meaningful information, e.g., for monitoring. We should expose this endpoint but we need to make sure that no other paths can be reached. This means we need to verify that

  1. Kubernetes does not allow access to another path (in any ingress controller)
  2. Core does not normalize relative URLs