kubeflow / pipelines / 5730

73%

master: 0%

Pull #2614

travis-ci-com

Enable inverse proxy to access host network

When switching to GKE workload identity, the pods can't access to metadata server anymore by default due to metadata concealment. 
This can be unlocked by explicitly enable hostnetwork for the pod. 
https://cloud.google.com/kubernetes-engine/docs/how-to/protecting-cluster-metadata#concealment

This should be OK as proxy is an optional component. In any case when user feel this not a secure option he/she could opt out it.

3466 of 4422 branches covered (78.38%)

Branch coverage included in aggregate %.

15389 of 21423 relevant lines covered (71.83%)

23.17 hits per line