Uploaded image for project: 'Data Collection, Analytics, and Events'
  1. Data Collection, Analytics, and Events
  2. DCAEGEN2-2073

Remove CBS nodeport exposure on http

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Done
    • Icon: Medium Medium
    • Frankfurt Release
    • None
    • None
    • None
    • DCAE Frankfurt Sprint 5 (M4), DCAE Frankfurt Sprint 6 (RC0)

      Integration/Security scan identified CBS is still exposing http port via nodeport

       

      config-binding-service         30415/tcp  open      http            Ajenti         http              control      panel                                                        

       

      As CBS has 30414 (HTTPS) already enabled/mapped to 10443 internal port, the HTTP nodeport assignment can be removed.

       

      For remote/k8s deployment of DCAE MS, the proxy should switch to CBS HTTPS.

                 

       

            vv770d vv770d
            vv770d vv770d
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: