gitlab-org--gitlab-foss/changelogs/unreleased/security-kubernetes-local-ssrf.yml
Thong Kuah af16fd687e Do not allow local urls in Kubernetes form
Use existing `public_url` validation to block various local urls. Note
that this validation will allow local urls if the "Allow requests to the
local network from hooks and services" admin setting is enabled.

Block KubeClient from using local addresses

It will also respect `allow_local_requests_from_hooks_and_services` so
if that is enabled KubeClinet will allow local addresses
2019-02-21 23:16:11 +13:00

5 lines
93 B
YAML

---
title: Block local URLs for Kubernetes integration
merge_request:
author:
type: security