I am working through the scenario where you can make the management API only accessible over the local host. (time got away from me)
.. this was covered in this post
When I started to investigate this further.. I noticed the following.
my controller yaml file only has an entry for client-management
there is no entry for
maybe I have an old config.. as its been a while since I installed ziti from scratch
So.. I thought to confirm
-
if there is no entry.. then by default.. the management API would not be accessible.. as there is no listener configured to find it
-
could this be why I cannot access the management API documentation?
.. as when I try to access it using the following url
https://IP-address:8441/edge/management/v1/docs
.. it retrieves the client documentation instead.
Actually.. to clarify further.. I just realised the following
.. in the example provided.. the entry of client-management is split into
- management-apis
- client-apis
...
change this entry
web:
- name: client-management
bindPoints:
to look like this:
web:
bindPoints:
- interface: 127.0.0.1:5309
address: "127.0.0.1:5309"
identity: (removed section for brevity)
options: (
- name: client-apis
bindPoints:
So.. I guess the naming of the entries does not really matter that much..
What is important is the details of the details of the bindings