Kubernetes Submit Queue
4ac5f278c5
Merge pull request #38742 from timstclair/cri-exec-long
...
Automatic merge from submit-queue
[CRI] Don't include user data in CRI streaming redirect URLs
Fixes: https://github.com/kubernetes/kubernetes/issues/36187
Avoid userdata in the redirect URLs by caching the {Exec,Attach,PortForward}Requests with a unique token. When the redirect URL is created, the token is substituted for the request params. When the streaming server receives the token request, the token is used to fetch the actual request parameters out of the cache.
For additional security, the token is generated using the secure random function, is single use (i.e. the first request with the token consumes it), and has a short expiration time.
/cc @kubernetes/sig-node
2017-01-11 17:16:07 -08:00
..
2017-01-05 14:14:13 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-05 14:14:13 -08:00
2017-01-05 14:14:13 -08:00
2017-01-05 14:14:13 -08:00
2017-01-11 09:09:48 -05:00
2016-12-02 10:37:28 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-12-14 12:39:48 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 15:35:46 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-09-15 18:38:01 -04:00
2016-09-15 18:38:01 -04:00
2017-01-11 09:09:48 -05:00
2016-12-16 11:42:43 -05:00
2016-12-13 09:55:34 +01:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-12-14 12:39:48 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-09 17:08:53 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-12-14 12:39:49 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-10-19 15:55:39 +02:00
2016-12-29 09:35:01 +01:00
2016-11-23 15:53:09 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-11-23 15:53:09 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-03 15:36:15 -08:00
2017-01-11 13:40:43 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-12-05 16:27:07 -05:00
2017-01-11 09:09:48 -05:00
2016-12-14 12:39:48 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-12-05 16:27:07 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:14:56 -08:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-10-19 15:55:39 +02:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00
2016-06-29 17:47:36 -07:00
2017-01-11 09:09:48 -05:00
2017-01-11 09:09:48 -05:00