0003-bottlerocket-bind-introspection-to-localhost.patch

From 4341f9ecc3e527ffd2329359e86c5f74e64c5b74 Mon Sep 17 00:00:00 2001
From: Samuel Karp <skarp@amazon.com>
Date: Fri, 21 Aug 2020 11:07:32 -0700
Subject: [PATCH] bottlerocket: bind introspection to localhost

---
 agent/handlers/introspection_server_setup.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/agent/handlers/introspection_server_setup.go b/agent/handlers/introspection_server_setup.go
index 3ca0ecc..b7f70e9 100644
--- a/agent/handlers/introspection_server_setup.go
+++ b/agent/handlers/introspection_server_setup.go
@@ -88,7 +88,7 @@ func introspectionServerSetup(containerInstanceArn *string, taskEngine handlersu
 		wTimeout = writeTimeoutForPprof
 	}
 	server := &http.Server{
-		Addr:         ":" + strconv.Itoa(config.AgentIntrospectionPort),
+		Addr:         "127.0.0.1:" + strconv.Itoa(config.AgentIntrospectionPort),
 		Handler:      loggingServeMux,
 		ReadTimeout:  readTimeout,
 		WriteTimeout: wTimeout,
-- 
2.40.1