ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-09 21:14:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(kubernetes): drop the useless allowlist workaround

Browse Source
This commit is contained in:
pedrooot committed 2026-10-08 00:14:58 +02:00
1 parent ba10a5f40d
commit 2e2bd0a0c0
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
docs/user-guide/providers/kubernetes/misc.mdx
+1 -1
View File
@@ -71,4 +71,4 @@ api:
Setting it only on the API container has no effect. The same variable applies to the IaC and OpenStack providers. The Image provider has its own, `PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS`.
The check resolves the cluster hostname locally, before the Kubernetes client connects. If egress is only possible through `HTTPS_PROXY` and the hostname cannot be resolved locally, declare the cluster's address range in `PROWLER_ALLOWED_PRIVATE_NETWORKS` or make the name resolvable to the scanning process.
The check resolves the cluster hostname locally, before the Kubernetes client connects. If egress is only possible through `HTTPS_PROXY` and the hostname cannot be resolved locally, make the name resolvable to the scanning process. An allowlisted range does not help here: a host that does not resolve is rejected before any address is compared against the allowlist.