Feedback on Detected INSECURE_HTTP

[zyue110026]

Greetings,

We are some security researchers who have built a scanner to detect configurations that can be used to conduct attacks for Kubernetes pods. For your repository, we have found a few misconfigurations in the following locations:

Misconfiguration name: INSECURE_HTTP
Location-1:

micro-apps/config/base/elastic/statefulset.yml

Line 83 in f325843

- '--es.uri=http://localhost:9200'

Please give us feedback. Do you think these are valid instances of misconfigurations? Will you fix them?