Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make use of secure port when accessing Kubelet API #16063

Merged
merged 2 commits into from
Feb 5, 2020

Conversation

ChrsMark
Copy link
Member

@ChrsMark ChrsMark commented Feb 4, 2020

What does this PR do?

This PR switches Metricbeat k8s manifests and docs to point to Kubelet secure port over https instead of the insecure port.

Why is it important?

Insecure port of Kubelet (10255/TCP) is now less common and discouraged and also in most cases it is not enabled by default (requiring to restart kubelet with --read-only-port flag)

Checklist

  • My code follows the style guidelines of this project
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have made corresponding change to the default configuration files
  • I have added tests that prove my fix is effective or that my feature works

Related issues

Signed-off-by: chrismark <chrismarkou92@gmail.com>
@ChrsMark ChrsMark added enhancement in progress Pull request is currently in progress. needs_backport PR is waiting to be backported to other branches. containers Related to containers use case v7.7.0 labels Feb 4, 2020
@ChrsMark ChrsMark requested a review from a team as a code owner February 4, 2020 13:41
@ChrsMark ChrsMark self-assigned this Feb 4, 2020
@ChrsMark ChrsMark added Team:Integrations Label for the Integrations team Team:Platforms Label for the Integrations - Platforms team labels Feb 4, 2020
Comment on lines 82 to 83
# If using Red Hat OpenShift remove the previous hosts entry and
# uncomment these settings:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this comment needs rewording, right?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

Copy link
Contributor

@exekias exekias left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for starting this! left a minor comment

@exekias
Copy link
Contributor

exekias commented Feb 4, 2020

this will need a changelog

Signed-off-by: chrismark <chrismarkou92@gmail.com>
@ChrsMark ChrsMark requested a review from exekias February 5, 2020 09:04
@ChrsMark
Copy link
Member Author

ChrsMark commented Feb 5, 2020

Also these changes might apply to ECK manifests and helm-chart1 helm-chart2 maybe?

@exekias
Copy link
Contributor

exekias commented Feb 5, 2020

Also these changes might apply to ECK manifests and helm-chart1 helm-chart2 maybe?

Yes! good catch

@ChrsMark ChrsMark merged commit b9791ad into elastic:master Feb 5, 2020
ChrsMark added a commit to ChrsMark/beats that referenced this pull request Feb 5, 2020
@ChrsMark ChrsMark removed the needs_backport PR is waiting to be backported to other branches. label Feb 5, 2020
ChrsMark added a commit that referenced this pull request Feb 5, 2020
sebgl pushed a commit to elastic/cloud-on-k8s that referenced this pull request Feb 6, 2020
What does this PR do?
This PR switches Metricbeat k8s manifests and docs to point to Kubelet secure port over https instead of the insecure port.

Why is it important?
Insecure port of Kubelet (10255/TCP) is now less common and discouraged and also in most cases it is not enabled by default (requiring to restart kubelet with --read-only-port flag)

Related to elastic/beats#16063
ChrsMark added a commit to ChrsMark/beats that referenced this pull request Mar 9, 2020
@ChrsMark ChrsMark added the v7.6.2 label Mar 9, 2020
ChrsMark added a commit that referenced this pull request Mar 9, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
containers Related to containers use case enhancement in progress Pull request is currently in progress. Team:Integrations Label for the Integrations team Team:Platforms Label for the Integrations - Platforms team v7.6.2 v7.7.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Metricbeat] Kubelet secure port is not covered in YAML and documentation
3 participants