Update security-concept.md

Clarified listening addresses for dapr sidecar.

Signed-off-by: Andreas Eriksson <andreas.eriksson@griffeye.com>
This commit is contained in:
Andreas Eriksson 2023-10-20 08:52:44 +02:00 committed by GitHub
parent e82d51c2ca
commit 2ed23abb54
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -81,7 +81,7 @@ The diagram below shows how the Sentry system service issues certificates for ap
### Preventing IP addresses on Dapr
To prevent Dapr sidecars from being called on any IP address (especially in production environments such as Kubernetes), Dapr restricts its listening IP addresses only to `localhost`. Use the [dapr-listen-addresses]({{<ref arguments-annotations-overview>}}) setting you need to enable other addresses.
To prevent Dapr sidecars from being called on any IP address (especially in production environments such as Kubernetes), Dapr restricts its listening IP addresses to `localhost`. Use the [dapr-listen-addresses]({{<ref arguments-annotations-overview>}}) setting if you need to enable access from external addresses.
## Secure Dapr to application communication