Hi all; hopefully someone can guide me in the righ...
# infisical-help
a
Hi all; hopefully someone can guide me in the right direction on this. I'm trying to setup a Kubernetes Auth as part of the K8s Agent Injector, but I'm getting an error as my cluster is hosted in my homelab and therefore the hostname resolves to a private IP address and I am getting the attached error. Is there anyway to disable this check, or am I doing something else wrong? This is a self-hosted instance of infisical, using version 0.159.9
👀 1
✅ 1
On a related task, I can't copy/paste the
Token Reviewer JWT
value into the UI - again not sure if there's something I can change to allow that or if I need to look for a programmatic method to update it after I've solved the URL issue
j
Hey @Anthony Norwood, Infisical has built-in SSRF protection that blocks connections to private/internal IP addresses by default, which is why it's rejecting your homelab K8s API endpoint. Please try adding this environment variable to your Infisical deployment:
Copy code
ALLOW_INTERNAL_IP_CONNECTIONS=true
Just add that to wherever you configure your Infisical instance (docker-compose, Helm values, etc.) and restart. That should get you unblocked right away. More details on this and other env vars here: https://infisical.com/docs/self-hosting/configuration/envars
Also, regarding the paste in the UI, I'm not seeing anything in the code that would cause that. Have you tried multiple different browsers? Possibly any extensions blocking the input?
a
Hi Jake, thanks very much that fixed the issue perfectly! And yeah, I tried on a different PC and it worked fine, so must have been something odd when I was trying this morning. I'm getting a 400 error when trying to use it, but at least I can paste it in and can troubleshoot something else
🙌 1
And that easily solved in the end too. Now the fun bit