mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-21 02:41:25 +00:00
add the caller ip into rsync hosts allow list
This commit is contained in:
parent
e633a1604f
commit
ca76002e89
@ -72,7 +72,7 @@ port = 8730
|
|||||||
numeric ids = true
|
numeric ids = true
|
||||||
$USER_CONFIG
|
$USER_CONFIG
|
||||||
hosts deny = *
|
hosts deny = *
|
||||||
hosts allow = ${ALLOW}
|
hosts allow = ${ALLOW} ${ALLOW_HOST-}
|
||||||
auth users = k8s
|
auth users = k8s
|
||||||
secrets file = ${SECRETS}
|
secrets file = ${SECRETS}
|
||||||
read only = false
|
read only = false
|
||||||
|
@ -617,6 +617,7 @@ function kube::build::start_rsyncd_container() {
|
|||||||
V=3 kube::log::status "Starting rsyncd container"
|
V=3 kube::log::status "Starting rsyncd container"
|
||||||
kube::build::run_build_command_ex \
|
kube::build::run_build_command_ex \
|
||||||
"${KUBE_RSYNC_CONTAINER_NAME}" -p 127.0.0.1:${KUBE_RSYNC_PORT}:${KUBE_CONTAINER_RSYNC_PORT} -d \
|
"${KUBE_RSYNC_CONTAINER_NAME}" -p 127.0.0.1:${KUBE_RSYNC_PORT}:${KUBE_CONTAINER_RSYNC_PORT} -d \
|
||||||
|
-e ALLOW_HOST="$(ifconfig | grep -Eo 'inet (addr:)?([0-9]*\.){3}[0-9]*' | grep -Eo '([0-9]*\.){3}[0-9]*' | grep -v '127.0.0.1')" \
|
||||||
-- /rsyncd.sh >/dev/null
|
-- /rsyncd.sh >/dev/null
|
||||||
|
|
||||||
local mapped_port
|
local mapped_port
|
||||||
|
Loading…
Reference in New Issue
Block a user