[jira] [Resolved] (FLINK-24474) Standalone clusters should bind to localhost by default

["Matthias Pohl (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FLINK-24474?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Matthias Pohl resolved FLINK-24474.
-----------------------------------
    Resolution: Fixed

{{master}}: [ec25a4db90759d3bfbcd18ff6b60a7cb2d92ee62|https://github.com/apache/flink/commit/ec25a4db90759d3bfbcd18ff6b60a7cb2d92ee62]
{{flink-docker:dev-master}}: [14abb80f8bdd0cc17aa3f4d0f0360a285663965c|https://github.com/apache/flink-docker/commit/14abb80f8bdd0cc17aa3f4d0f0360a285663965c]

> Standalone clusters should bind to localhost by default
> -------------------------------------------------------
>
>                 Key: FLINK-24474
>                 URL: https://issues.apache.org/jira/browse/FLINK-24474
>             Project: Flink
>          Issue Type: Improvement
>          Components: Runtime / Configuration
>            Reporter: Chesnay Schepler
>            Assignee: Niklas Semmler
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 1.15.0
>
>
> By default the REST endpoints bind to 0.0.0.0.
> This is fine for docker use-cases as it simplifies the setup and the API isn't reachable unless the user explicitly enables that via docker.
> However, for standalone clusters this is a different story, and it is currently too easy for users to accidentally expose their clusters to the outside world.
> We should set the bind address by default to localhost, and change the docker-scripts to set this to 0.0.0.0 .



--
This message was sent by Atlassian Jira
(v8.20.1#820001)