typhoon/kube-controller-manager.yaml at main - typhoon - git.dotya.ml

mirror/typhoon

mirror of https://github.com/poseidon/typhoon synced 2024-12-21 16:04:10 +01:00

Dalton Hubble cbef202eec Update Prometheus discovery of kube components

* Kubernetes v1.22.0 disabled kube-controller-manager insecure
port, which was used internally for Prometheus metrics scraping
* Configure Prometheus to discover and scrape endpoints for
kube-scheduler and kube-controller-manager via the authenticated
https ports, via bearer token
* Change firewall ports to allow Prometheus (on worker nodes)
to scrape kube-scheduler and kube-controller-manager targets
that run on controller(s) with hostNetwork
* Disable the insecure port on kube-scheduler

2021-08-10 21:25:19 -07:00

17 lines

327 B

YAML

Raw Permalink Blame History

 # Allow Prometheus to discover service endpoints
 apiVersion: v1
 kind: Service
 metadata:
   name: kube-controller-manager
   namespace: kube-system
 spec:
   type: ClusterIP
   clusterIP: None
   selector:
     k8s-app: kube-controller-manager
   ports:
     - name: metrics
       protocol: TCP
       port: 10257
       targetPort: 10257