-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Make use of secure port when accessing Kubelet API #16063
Conversation
Signed-off-by: chrismark <chrismarkou92@gmail.com>
# If using Red Hat OpenShift remove the previous hosts entry and | ||
# uncomment these settings: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this comment needs rewording, right?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for starting this! left a minor comment
this will need a changelog |
Signed-off-by: chrismark <chrismarkou92@gmail.com>
Also these changes might apply to ECK manifests and helm-chart1 helm-chart2 maybe? |
Yes! good catch |
(cherry picked from commit b9791ad)
What does this PR do? This PR switches Metricbeat k8s manifests and docs to point to Kubelet secure port over https instead of the insecure port. Why is it important? Insecure port of Kubelet (10255/TCP) is now less common and discouraged and also in most cases it is not enabled by default (requiring to restart kubelet with --read-only-port flag) Related to elastic/beats#16063
(cherry picked from commit b9791ad)
What does this PR do?
This PR switches Metricbeat k8s manifests and docs to point to Kubelet secure port over https instead of the insecure port.
Why is it important?
Insecure port of Kubelet (10255/TCP) is now less common and discouraged and also in most cases it is not enabled by default (requiring to restart
kubelet
with--read-only-port
flag)Checklist
I have added tests that prove my fix is effective or that my feature worksRelated issues