Antonio Ojea 8b5fa408e0 kube-proxy: only set route_localnet if required ...

kube-proxy sets the sysctl net.ipv4.conf.all.route_localnet=1
so NodePort services can be accessed on the loopback addresses in
IPv4, but this may present security issues.

Leverage the --nodeport-addresses flag to opt-out of this feature,
if the list is not empty and none of the IP ranges contains an IPv4
loopback address this sysctl is not set.

In addition, add a warning to inform users about this behavior.

2022-02-17 20:20:31 +01:00

..

apis

Merge pull request #106453 from davidleitw/master

2022-01-11 17:13:23 -08:00

config

OWNERS cleanup - Jan 2021 Week 1

2022-01-10 08:14:29 -05:00

healthcheck

removed unnecessary log line

2022-01-09 11:48:03 +05:30

iptables

kube-proxy: only set route_localnet if required

2022-02-17 20:20:31 +01:00

ipvs

OWNERS cleanup - Jan 2021 Week 1

2022-01-10 08:14:29 -05:00

metaproxier

Migrate cmd/proxy/app and pkg/proxy/meta_proxier to structured logging (#104928)

2021-09-14 20:50:40 -07:00

metrics

kube-proxy iptables expose number of rules metrics

2021-03-05 10:00:38 +01:00

userspace

Check in OWNERS modified by update-yamlfmt.sh

2021-12-09 21:31:26 -05:00

util

kube-proxy: only set route_localnet if required

2022-02-17 20:20:31 +01:00

winkernel

OWNERS cleanup - Jan 2021 Week 1

2022-01-10 08:14:29 -05:00

winuserspace

remove ReallyCrashForTesting and cleaned up some references to HandleCrash behavior

2021-11-29 20:00:10 +00:00

doc.go

…

endpoints_test.go

Graduate EndpointSliceProxying and WindowsEndpointSliceProxying Gates

2021-07-07 13:33:30 -07:00

endpoints.go

kube-proxy: fix stale detection logic

2021-11-05 20:14:56 +01:00

endpointslicecache_test.go

Kubeproxy uses V1 EndpointSlice

2021-06-30 18:41:57 -07:00

endpointslicecache.go

Migrated pkg/proxy to structured logging (#104891)

2021-10-14 09:47:17 -07:00

OWNERS

Check in OWNERS modified by update-yamlfmt.sh

2021-12-09 21:31:26 -05:00

service_test.go

run hack/update-netparse-cve.sh

2021-08-20 10:42:09 +02:00

service.go

Migrated pkg/proxy to structured logging (#104891)

2021-10-14 09:47:17 -07:00

topology_test.go

Updating kube-proxy to ignore unready endpoints for Topology Hints

2021-11-18 14:04:44 -08:00

topology.go

Updating kube-proxy to ignore unready endpoints for Topology Hints

2021-11-18 14:04:44 -08:00

types.go

Drop broken/no-op proxyconfig.EndpointsHandler implementations

2021-09-13 09:32:38 -04:00