NS8 cluster-admin access

[mrmarkuz (Markus Neuberger)]

Here are instructions to restrict the cluster-admin access:

How do I prevent the administration page from being accessible from the Internet?

There can be many ways to achieve it. The first one I’d try is restricting the /cluster-admin HTTP path to some trusted IPs. For example, the list of loopback and private networks. Enter the environment of traefik1 runagent -m traefik1 Create a file, _custom_middlewares.yml with the following contents: http: middlewares: MwTrustedNetworks: IPAllowList: sourceRange: - "127.0.0.0/8" - "10.0.0.0/8" - "172.16.0.0/12" - "192.168.0.0/16"…