feat: Improve unallowed URLs of webhook-service (#7147)

keptn · Mar 15, 2022 · d5c1d3c · d5c1d3c
1 parent 6805da2
commit d5c1d3c
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/webhook-service/main.go b/webhook-service/main.go
@@ -37,10 +37,18 @@ func main() {
 		&lib.OSCmdExecutor{},
 		lib.WithUnAllowedURLs(
 			[]string{
+				// Block access to Kubernetes API
+				kubeAPIHostIP,
 				kubeAPIHostIP + ":" + kubeAPIPort,
+				"kubernetes",
 				"kubernetes" + ":" + kubeAPIPort,
+				"kubernetes.default",
 				"kubernetes.default" + ":" + kubeAPIPort,
+				"kubernetes.default.svc",
+				"kubernetes.default.svc" + ":" + kubeAPIPort,
+				"kubernetes.default.svc.cluster.local",
 				"kubernetes.default.svc.cluster.local" + ":" + kubeAPIPort,
+				// Block access to localhost
 				"localhost",
 				"127.0.0.1",
 				"::1",