aFuerst opened a new issue #4904: URL: https://github.com/apache/openwhisk/issues/4904
## Environment details: * standalone deployment, native ubuntu * Docker version 18.09.2, build 6247962 * Description: Ubuntu 16.04.5 LTS ## Steps to reproduce the issue: 1. Build standalone server `./gradlew :core:standalone:build` 2. Run with API gateway `java -jar ./bin/openwhisk-standalone.jar --api-gw --api-gw-port 4569` 3. Notice a Redis docker instance is created ## Provide the expected results and outputs: Custom configuration overriding [`standalone.conf` redis settings](https://github.com/apache/openwhisk/blob/master/core/standalone/src/main/resources/standalone.conf#L92) allows mounting custom `redis.conf` to the container, changing the docker host port, or just a setting password on Redis ## Provide the actual results and outputs: [API GW uses default Redis port and provides no way to override it or redis any config](https://github.com/apache/openwhisk/blob/master/core/standalone/src/main/scala/org/apache/openwhisk/standalone/ApiGwLauncher.scala#L57) ## Additional information you deem important: * This open Redis is a security vulnerability ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
