Skip to content

feat: new configuration option cloneAccessAddresses to control port publishing for clone containers; restrict to 127.0.0.1 by default (#528)

Artyom Kartasov requested to merge 528-local-clone-host into master

Description

Add an option to configure host restriction for accessing clones.

Restricted to localhost by default

Related issue

#528

Examples

provision:
  # IP addresses that can be used to access clones.
  # By default, using a loop-back to accept only local connections.
  # The empty string means "all available addresses".
  # The option supports multiple IPs (using comma-separated format) and IPv6 addresses (for example, [::1])
  cloneAccessAddresses: "127.0.0.1,172.17.0.1"

Multiple IPs

$ docker ps 
CONTAINER ID   STATUS          PORTS                                                           NAMES
fbeec44ad344   Up 6 seconds    5432/tcp, 127.0.0.1:6001->6001/tcp, 172.17.0.1:6001->6001/tcp   dblab_clone_6001

IPv6

$ docker ps 
CONTAINER ID   STATUS          PORTS                                             NAMES
2a171dcf650a   Up 6 seconds    5432/tcp, ::1:6001->6001/tcp                      dblab_clone_6001

Checklist

  • MR description has been reviewed
  • MR changes are functionally tested
  • MR does NOT have API/CLI changes OR there are API/CLI changes and they have been reviewed & DOCS ARE ADJUSTED (reference doc, etc)
  • MR does NOT have UI changes OR there are UI changes and they have been reviewed & UX IS REVIEWED

Closes #528

Edited by Nikolay Samokhvalov

Merge request reports