zalando / skipper / 21372649527

push

github

security: disable kubernetes external name by default (#3842)

security: disable kubernetes external name by default

This PR breaks end-users and library-users that depend on Kubernetes
Ingress referencing a Kubernetes service type ExternalName.

If you are end-user and depend on the former behavior, you can pass
`-enable-kubernetes-external-names` to your deployment.
If you are library-user and depend on the former behavior, you can pass
the following option to restore behavior:
```go
skipper.Run(skipper.Options{
    EnableExternalNames: true,
})
```

ref:
https://github.com/zalando/skipper/security/advisories/GHSA-mxxc-p822-2hx9

Signed-off-by: Sandor Szücs <sandor.szuecs@zalando.de>

13 of 19 new or added lines in 5 files covered. (68.42%)

24634 of 31445 relevant lines covered (78.34%)

95536.19 hits per line