Access control

The metadata service is intended to hold public information for direct consumption by cantabular-api-ext and cantabular-ui. As such, no user-level authentication mechanism is available. This is instead delegated to the service consuming it.

Access to the metadata service, however, can be limited by giving it an allowed list of IP subnets on startup. This can be used to, for example, limit access in production to only the hosts associated with cantabular-api-ext and cantabular-ui.

Details of how to configure access control are available on the command line by running cantabular-metadata -?.