Secure localhost registry (carry of #8898)#9124
Secure localhost registry (carry of #8898)#9124erikh merged 2 commits intomoby:masterfrom erikh:secure-localhost
Conversation
Signed-off-by: Johan Euphrosine <proppy@google.com>
registry/registry_test.go
Outdated
There was a problem hiding this comment.
I think you need to merge those tests with the existing ones.
There was a problem hiding this comment.
I blame git rebase. Will do later today.
There was a problem hiding this comment.
@erikh i thought this was merged already in master
There was a problem hiding this comment.
Yes, but the test changed a bit.
There was a problem hiding this comment.
can you rebase to make sure?
…ywhere Docker-DCO-1.1-Signed-off-by: Erik Hollensbe <github@hollensbe.org> (github: erikh)
|
rebased and corrected tests. |
|
@unclejack @proppy can you please test that localhost does not need insecure registry flag? |
|
@tiborvass I'm on it, the tests are passing and I'm going to test the change now. |
This is already tested here: |
|
The updated behavior treats all 127.0.0.1/localhost references as insecure, so technically, it’s testing something different. I’d like to leave it in.
|
|
I confirm this works as expected. LGTM |
|
localhost works without requiring LGTM |
|
Someone please merge when you're ready |
Secure localhost registry (carry of #8898)
|
KAPOW! |
|
OI! where's the documentation for this? |
|
@SvenDowideit for the record, I rewrote the whole section: tiborvass@5937663 It's from #9100 |
This carries @proppy's localhost registry patch but makes one big modification: all 127.0.0.1 registries are always treated as insecure.
/cc @tiborvass