feat: new configuration option cloneAccessAddresses to control port publishing for clone containers; restrict to 127.0.0.1 by default (#528)
Description
Add an option to configure host restriction for accessing clones.
Restricted to localhost by default
Related issue
#528
Examples
provision:
# IP addresses that can be used to access clones.
# By default, using a loop-back to accept only local connections.
# The empty string means "all available addresses".
# The option supports multiple IPs (using comma-separated format) and IPv6 addresses (for example, [::1])
cloneAccessAddresses: "127.0.0.1,172.17.0.1"
Multiple IPs
$ docker ps
CONTAINER ID STATUS PORTS NAMES
fbeec44ad344 Up 6 seconds 5432/tcp, 127.0.0.1:6001->6001/tcp, 172.17.0.1:6001->6001/tcp dblab_clone_6001
IPv6
$ docker ps
CONTAINER ID STATUS PORTS NAMES
2a171dcf650a Up 6 seconds 5432/tcp, ::1:6001->6001/tcp dblab_clone_6001
Checklist
-
MR description has been reviewed -
MR changes are functionally tested -
MR does NOT have API/CLI changes OR there are API/CLI changes and they have been reviewed & DOCS ARE ADJUSTED (reference doc, etc) -
MR does NOT have UI changes OR there are UI changes and they have been reviewed & UX IS REVIEWED
Closes #528
Edited by Nikolay Samokhvalov