Skip to content

Disable worker auto-registration by default

Rémi Duraffort requested to merge fix-worker-auto-registration into master

This option has security implication if not configured correctly.

The default value WORKER_AUTO_REGISTER_NETMASK allows localhost to register workers, however, if you have a HTTP proxy server LAVA will see the proxy server IP address which might be a localhost. In this case anyone will be able to register a worker and obtain the token.

Work around for #600

Edited by Igor Ponomarev

Merge request reports