https://bugzilla.redhat.com/show_bug.cgi?id=1395172
Trevor Jay <tjay(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |tjay(a)redhat.com
--- Comment #4 from Trevor Jay <tjay(a)redhat.com> ---
I've looked at our Jenkins container images (from/for OpenShift) and I am *not*
recommending respins of those images.
While mentioned in the `EXPOSE` list, port 50000 (the CLI port) is only
available to the outside world if the user either explicitly maps it (`-p
50000:X`) or uses the always-a-bad-idea `-P`. In OpenShift, port 50000 is not
automatically exposed via `oc expose svc/jenkins-X-rhel7` as only the web
interface (8080) is listed in the `openshift.io.expose-services` label and
routed to.
In other words: the CLI is by default only exposed within the private network
on vanilla Docker and only within the cluster by default on vanilla OpenShift.
This lowers the risk to moderate within these context and---in my
judgement---below the threshold needed to require respins.
_Trevor
--
You are receiving this mail because:
You are on the CC list for the bug.