1
88%
main: 88%

Ran 21 May 2026 07:05PM UTC

Files 10

Run time 1s

Badge

Embed ▾

Committed 20 May 2026 07:55PM UTC coverage: 84.067% (+0.2%) from 83.864%

Job # 26247136912.1

Build Type

push

github

Committed by

dguerri

Commit Message

fix(tcp): enforce the listener port assigned by the SSH server

TCP listeners pinning a specific port silently accepted whatever port
the SSH server returned, because the URI verification short-circuited
whenever RemoteHost was "localhost" (the default when no hostname is
set in the listener spec).

Add an EnforcePort flag to ForwardingConfig, set it for TCP listeners
with port > 0, and require the assigned tcp:// URI to use that exact
port. On mismatch (or verification timeout), the forwarding is
cancelled and the route reconciler retries with backoff — same retry
pattern HTTP hostnames already use. HTTP/HTTPS behavior is unchanged.

Coverage Stats

1604 of 1908 relevant lines covered (84.07%)

6.9 hits per line

dguerri / k8s-ssh-gateway-controller / 26247136912 / 1
88%
main: 88%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 26247136912.1

dguerri / k8s-ssh-gateway-controller / 26247136912 / 1 88% main: 88%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 26247136912.1

dguerri / k8s-ssh-gateway-controller / 26247136912 / 1
88%
main: 88%

README BADGES
x