unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix: set Host header on paperclip health probes to bypass hostname guard #107

Merged
unkinben merged 1 commits from benvin/paperclip_live_probe into main 2026-05-02 23:01:59 +10:00
Conversation 0 Commits 1 Files Changed 1
+6
unkinben commented 2026-05-02 22:59:25 +10:00
Owner
Copy Link
Copy Source

The privateHostnameGuard middleware blocks requests where the Host header
is not in the allowlist. Kubelet httpGet probes use the pod IP as the
Host header, which is never in the allowlist. Setting Host: localhost
ensures probes are always permitted.

The privateHostnameGuard middleware blocks requests where the Host header is not in the allowlist. Kubelet httpGet probes use the pod IP as the Host header, which is never in the allowlist. Setting Host: localhost ensures probes are always permitted.
unkinben added 1 commit 2026-05-02 22:59:25 +10:00
fix: set Host header on paperclip health probes to bypass hostname guard
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
926f3b34ba 
The privateHostnameGuard middleware blocks requests where the Host header
is not in the allowlist. Kubelet httpGet probes use the pod IP as the
Host header, which is never in the allowlist. Setting Host: localhost
ensures probes are always permitted.
unkinben merged commit 156b545249 into main 2026-05-02 23:01:59 +10:00
unkinben deleted branch benvin/paperclip_live_probe 2026-05-02 23:01:59 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#107
Delete Branch "benvin/paperclip_live_probe"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?