Skip to content

Conversation

@embik
Copy link
Member

@embik embik commented Apr 7, 2025

Summary

It looks like we missed a conditional in d8cbc0a and now every kcp setup that starts sets up the mini-front-proxy handlers. Looking at the PR (#3199), I don't think that was the intention, and it also started exposing an unauthenticated /metrics endpoint on the kcp server binary.

My quick read of the code / logic is: Only register the extra handlers if we indeed want to start a mini-front-proxy by passing additional mappings, but I'm not sure if this is the way to go. @mjudeikis please advise if we should do it differently, but we need to make sure this development feature doesn't bleed into kcp-the-server.

Related issue(s)

Fixes #3360

Release Notes

Stop exposing mini-front-proxy handlers (including `/metrics`) on kcp server unless `--additional-mappings-file` is passed

@embik embik requested a review from mjudeikis April 7, 2025 14:32
@kcp-ci-bot kcp-ci-bot added release-note Denotes a PR that will be considered when it comes time to generate release notes. dco-signoff: yes Indicates the PR's author has signed the DCO. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Apr 7, 2025
@embik embik changed the title 🐛 Do not set up local mini-front-proxy without additional mappings file 🐛 Do not set up local mini-front-proxy without additional mappings file Apr 7, 2025
@embik
Copy link
Member Author

embik commented Apr 7, 2025

/retest

flake?

@mjudeikis
Copy link
Contributor

/lgtm
/approve

We can revisit this flow if we need to later.

@kcp-ci-bot kcp-ci-bot added the lgtm Indicates that a PR is ready to be merged. label Apr 7, 2025
@kcp-ci-bot
Copy link
Contributor

LGTM label has been added.

Git tree hash: 8b97dd61b7eb1492b902b757844c9bded360a415

@kcp-ci-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mjudeikis

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kcp-ci-bot kcp-ci-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 7, 2025
@embik
Copy link
Member Author

embik commented Apr 7, 2025

/retest

@kcp-ci-bot kcp-ci-bot merged commit ed76888 into kcp-dev:main Apr 7, 2025
14 of 16 checks passed
@embik embik deleted the disable-localproxy branch April 7, 2025 15:44
@embik
Copy link
Member Author

embik commented Apr 7, 2025

/cherry-pick release-0.27

@kcp-ci-bot
Copy link
Contributor

@embik: new pull request created: #3362

In response to this:

/cherry-pick release-0.27

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates the PR's author has signed the DCO. lgtm Indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug: /metrics authorization missing

3 participants