Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update log shipper docs to ensure that no public access is granted #930

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

jsierles
Copy link
Member

@jsierles jsierles commented Aug 16, 2023

A customer pointed out that our log shipper could expose its GraphQL API. We want standard shipper deployments to have no services nor IPs.

Note: --no-public-ips fails when an HTTP service is setup by default by fly launch.

@andie787
Copy link
Contributor

Should we mention that if they want only 1 machines, then use the --ha=false flag on fly deploy?

Related: this user PR for apps that do have 2 machines #820

@jsierles
Copy link
Member Author

Yes, actually this may be a related issue. The shipper can operate in HA mode by setting a QUEUE env var, but that doesn't happen by default. I've been working on automating the shipper, but parked that for now.

@andie787
Copy link
Contributor

#820 mentioned above was merged. this added info about QUEUE env var to the docs

@andie787
Copy link
Contributor

@jsierles Should we still ship this docs change or did it get fixed in flyctl?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants