{"action":"created","issue":{"url":"https://api.github.com/repos/paritytech/parity-ethereum/issues/9218","repository_url":"https://api.github.com/repos/paritytech/parity-ethereum","labels_url":"https://api.github.com/repos/paritytech/parity-ethereum/issues/9218/labels{/name}","comments_url":"https://api.github.com/repos/paritytech/parity-ethereum/issues/9218/comments","events_url":"https://api.github.com/repos/paritytech/parity-ethereum/issues/9218/events","html_url":"https://github.com/paritytech/parity-ethereum/issues/9218","id":344521397,"node_id":"MDU6SXNzdWUzNDQ1MjEzOTc=","number":9218,"title":"Parity on Kubernetes","user":{"login":"onpaws","id":182515,"node_id":"MDQ6VXNlcjE4MjUxNQ==","avatar_url":"https://avatars2.githubusercontent.com/u/182515?v=4","gravatar_id":"","url":"https://api.github.com/users/onpaws","html_url":"https://github.com/onpaws","followers_url":"https://api.github.com/users/onpaws/followers","following_url":"https://api.github.com/users/onpaws/following{/other_user}","gists_url":"https://api.github.com/users/onpaws/gists{/gist_id}","starred_url":"https://api.github.com/users/onpaws/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/onpaws/subscriptions","organizations_url":"https://api.github.com/users/onpaws/orgs","repos_url":"https://api.github.com/users/onpaws/repos","events_url":"https://api.github.com/users/onpaws/events{/privacy}","received_events_url":"https://api.github.com/users/onpaws/received_events","type":"User","site_admin":false},"labels":[{"id":661966621,"node_id":"MDU6TGFiZWw2NjE5NjY2MjE=","url":"https://api.github.com/repos/paritytech/parity-ethereum/labels/M2-config","name":"M2-config","color":"FFF7ED","default":false},{"id":290482954,"node_id":"MDU6TGFiZWwyOTA0ODI5NTQ=","url":"https://api.github.com/repos/paritytech/parity-ethereum/labels/Z1-question","name":"Z1-question","color":"fff5fb","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/paritytech/parity-ethereum/milestones/22","html_url":"https://github.com/paritytech/parity-ethereum/milestone/22","labels_url":"https://api.github.com/repos/paritytech/parity-ethereum/milestones/22/labels","id":3153051,"node_id":"MDk6TWlsZXN0b25lMzE1MzA1MQ==","number":22,"title":"2.1","description":"","creator":{"login":"5chdn","id":15729797,"node_id":"MDQ6VXNlcjE1NzI5Nzk3","avatar_url":"https://avatars3.githubusercontent.com/u/15729797?v=4","gravatar_id":"","url":"https://api.github.com/users/5chdn","html_url":"https://github.com/5chdn","followers_url":"https://api.github.com/users/5chdn/followers","following_url":"https://api.github.com/users/5chdn/following{/other_user}","gists_url":"https://api.github.com/users/5chdn/gists{/gist_id}","starred_url":"https://api.github.com/users/5chdn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/5chdn/subscriptions","organizations_url":"https://api.github.com/users/5chdn/orgs","repos_url":"https://api.github.com/users/5chdn/repos","events_url":"https://api.github.com/users/5chdn/events{/privacy}","received_events_url":"https://api.github.com/users/5chdn/received_events","type":"User","site_admin":false},"open_issues":150,"closed_issues":196,"state":"open","created_at":"2018-03-01T09:29:12Z","updated_at":"2018-07-27T16:20:34Z","due_on":"2018-08-27T07:00:00Z","closed_at":null},"comments":7,"created_at":"2018-07-25T16:40:16Z","updated_at":"2018-07-28T00:54:38Z","closed_at":null,"author_association":"NONE","body":"> I'm running:\r\n>\r\n> - **Which Parity version?**: [2.0.0](https://github.com/paritytech/parity-ethereum/releases/tag/v2.0.0)\r\n> - **Which operating system?**: Linux as provided by the Docker image\r\n> - **How installed?**: Docker image installed via Kubernetes\r\n> - **Are you fully synchronized?**: yes\r\n> - **Which network are you connected to?**: kovan\r\n> - **Did you try to restart the node?**: yes\r\n\r\nI have a \"Parity on Kubernetes\" security question and would appreciate any insight.\r\n\r\nI've deployed the Parity k8n manifests @ddorgan shared [here](https://github.com/paritytech/parity-ethereum/issues/7288#issuecomment-393500569) -- they've been working great, thanks!\r\nI see the logs on the Parity pod show syncing to the blockchain - excellent.\r\n\r\nI also see the Kubernetes docs indicate services of type `ClusterIP` \"makes the service only reachable from within the cluster.\"\r\nNow, because I see the blockchain syncing in the logs I think they mean something like a traditional NAT setup - traffic originating inside my Pod can get out, but originating outside the cluster won't route to the Service/Pod.\r\n\r\nOK, so far so good.\r\n\r\nEnter my app, which is Dockerized, and depends on the Parity JSON-RPC. I know I shouldn't open JSON-RPC to the outside world. At home, I know NAT on my router should prevent direct connections to my machines behind the router. \r\n\r\nThus I believe, but am not 100% sure, it should be safe to run Parity under a service as follows. \r\nWhat do you think?\r\n\r\n```\r\napiVersion: v1\r\nkind: Service\r\nmetadata:\r\n  name: parity-service\r\n  namespace: default\r\nspec:\r\n  selector:\r\n    app: parity\r\n  ports:\r\n    - name: eth-net\r\n      port: 30303\r\n      protocol: TCP\r\n    - name: json-rpc-http\r\n      port: 8545\r\n      protocol: TCP\r\n    - name: json-rpc-ws\r\n      port: 8546\r\n      protocol: TCP\r\n```"},"comment":{"url":"https://api.github.com/repos/paritytech/parity-ethereum/issues/comments/408570899","html_url":"https://github.com/paritytech/parity-ethereum/issues/9218#issuecomment-408570899","issue_url":"https://api.github.com/repos/paritytech/parity-ethereum/issues/9218","id":408570899,"node_id":"MDEyOklzc3VlQ29tbWVudDQwODU3MDg5OQ==","user":{"login":"onpaws","id":182515,"node_id":"MDQ6VXNlcjE4MjUxNQ==","avatar_url":"https://avatars2.githubusercontent.com/u/182515?v=4","gravatar_id":"","url":"https://api.github.com/users/onpaws","html_url":"https://github.com/onpaws","followers_url":"https://api.github.com/users/onpaws/followers","following_url":"https://api.github.com/users/onpaws/following{/other_user}","gists_url":"https://api.github.com/users/onpaws/gists{/gist_id}","starred_url":"https://api.github.com/users/onpaws/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/onpaws/subscriptions","organizations_url":"https://api.github.com/users/onpaws/orgs","repos_url":"https://api.github.com/users/onpaws/repos","events_url":"https://api.github.com/users/onpaws/events{/privacy}","received_events_url":"https://api.github.com/users/onpaws/received_events","type":"User","site_admin":false},"created_at":"2018-07-28T00:54:38Z","updated_at":"2018-07-28T00:54:38Z","author_association":"NONE","body":"Yes, that's right @ddorgan. What you're describing is prescient and precisely what we're aiming to build.\r\n\r\nIf my app doesn't need to use 30303, is there any harm in removing it from the `Service` manifest?\r\nI'm a bit fuzzy on whether that port is actually needed for e.g. blockchain syncing or some other critical functionality."}}
{"actor":{"display_login":"onpaws"}}