{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/8334","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/8334/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/8334/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/8334/events","html_url":"https://github.com/openshift/origin/pull/8334","id":145267880,"number":8334,"title":"haproxy obfuscated internal IP in routing cookie","user":{"login":"pecameron","id":13967482,"avatar_url":"https://avatars.githubusercontent.com/u/13967482?v=3","gravatar_id":"","url":"https://api.github.com/users/pecameron","html_url":"https://github.com/pecameron","followers_url":"https://api.github.com/users/pecameron/followers","following_url":"https://api.github.com/users/pecameron/following{/other_user}","gists_url":"https://api.github.com/users/pecameron/gists{/gist_id}","starred_url":"https://api.github.com/users/pecameron/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pecameron/subscriptions","organizations_url":"https://api.github.com/users/pecameron/orgs","repos_url":"https://api.github.com/users/pecameron/repos","events_url":"https://api.github.com/users/pecameron/events{/privacy}","received_events_url":"https://api.github.com/users/pecameron/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":18,"created_at":"2016-04-01T19:43:10Z","updated_at":"2016-04-18T15:15:22Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/8334","html_url":"https://github.com/openshift/origin/pull/8334","diff_url":"https://github.com/openshift/origin/pull/8334.diff","patch_url":"https://github.com/openshift/origin/pull/8334.patch"},"body":"The cookie currently returns the openshift internal pod IP address.\r\nThis is a security issue as an attacker can develop a map of the pods\r\nin the cluster just by observing the returned cookie.\r\n\r\nThis change returns a hash of the internal address and internal service\r\nname to obfuscate the internal information. The service name is configured\r\nwhen the service is created and is not visible to outside users. This\r\nin combination with the internal ip:port is hashed and presented in the\r\ncookie.\r\n\r\naddresses: https://bugzilla.redhat.com/show_bug.cgi?id=1318796"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/211425088","html_url":"https://github.com/openshift/origin/pull/8334#issuecomment-211425088","issue_url":"https://api.github.com/repos/openshift/origin/issues/8334","id":211425088,"user":{"login":"openshift-bot","id":1779249,"avatar_url":"https://avatars.githubusercontent.com/u/1779249?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2016-04-18T15:15:22Z","updated_at":"2016-04-18T15:15:22Z","body":"Evaluated for origin test up to 36c680b7928e5e0df5d2871f6ad20c7cba93a3ee"}}