You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
alexellis
changed the title
Enable basic-auth for faasd-containerd in faasd install
[Feature] Enable basic-auth for faasd-containerd in faasd install
Jan 2, 2020
Expected Behaviour
Enable basic-auth in faasd install by updating faas-containerd's unit file to set the basic_auth=true env-var.
Current Behaviour
Whilst faas-containerd now supports basic auth, it's disabled by default leaving it vulnerable, even if faasd and the gateway have it enabled.
Possible Solution
Edit https://github.com/alexellis/faasd/blob/master/hack/faas-containerd.service
Steps to Reproduce (for bugs)
curl -i host:8080/system/functions
has auth - status code 401curl -i host:8081/system/functions
has no auth - status code 200To test the fix, carry out step 1 with your new binary and new systemd unit file in place in your GOPATH. i.e.
./faasd install
Then repeat step 2 and step 3 making sure that both have auth enabled now, they should give status code 401.
The text was updated successfully, but these errors were encountered: