Not able to set new "allow_host_access" property in cf-release manifest
Closed this issue · 3 comments
We'd like to take advantage of the new option added in this commit:
The new property hasn't been added to the spec or templates in cf-release so right now we'd need to set it manually in warden.yml after deployment.
We have created an issue in Pivotal Tracker to manage this. You can view the current status of your issue at: https://www.pivotaltracker.com/story/show/76312042.
@amhuber This should be opened against cf-release. Also, could you expand on why you would be interested in exposing this.
I'll open an issue on cf-release.
As to why, we are required by our security policy to use IPSec encryption between all CF systems because you guys don't have SSL enabled on all internal communications, and that requires us to manage more complicated iptables rules than what you already create. Right now we have to work around this block rule so having this option exposed just lets us simplify our iptables logic.