volcano-sh
/
apis
mirror of https://github.com/volcano-sh/apis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #171 from Monokaix/release-1.11 

[Security] Add http server timeout
This commit is contained in:
Volcano Bot 2025-04-23 14:37:26 +08:00 committed by GitHub
parent 1088c722ca 2f8d2d01ae
commit 141674d13e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 19 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
pkg/apis/helpers/helpers.go
View File

@ -44,6 +44,19 @@ import (
schedulerv1beta1 "volcano.sh/apis/pkg/apis/scheduling/v1beta1"
)
const (
// DefaultReadHeaderTimeout defines the default timeout for reading request headers
DefaultReadHeaderTimeout = 5 * time.Second
// DefaultReadTimeout defines the default timeout for reading the entire request
DefaultReadTimeout = 30 * time.Second
// DefaultWriteTimeout defines the default timeout for writing the response
DefaultWriteTimeout = 60 * time.Second
// DefaultMaxHeaderBytes defines the default max size of request headers in bytes
// 1 MB
DefaultMaxHeaderBytes = 1 << 20
)
// JobKind creates job GroupVersionKind.
// JobKind creates job GroupVersionKind.
var JobKind = vcbatch.SchemeGroupVersion.WithKind("Job")
@ -202,7 +215,10 @@ func StartHealthz(healthzBindAddress, name string, caCertData, certData, certKey
server := &http.Server{
Addr: listener.Addr().String(),
Handler: pathRecorderMux,
MaxHeaderBytes: 1 << 20,
MaxHeaderBytes: DefaultMaxHeaderBytes,
ReadHeaderTimeout: DefaultReadHeaderTimeout,
ReadTimeout: DefaultReadTimeout,
WriteTimeout: DefaultWriteTimeout,
}
if len(caCertData) != 0 && len(certData) != 0 && len(certKeyData) != 0 {
certPool := x509.NewCertPool()