search

vmware-archive / helm-crd

Experimental CRD controller for managing Helm releases
Apache License 2.0
100 stars 13 forks source link

Actually restrict tiller to pod only #7

Closed anguslees closed 6 years ago

anguslees commented 6 years ago

Removing the Service resource and container port is not sufficient to restrict access. This change actually tells tiller to bind the gRPC port to localhost only.

Also: Bump tiller to 2.7.2