Skip to content

Fix metric endpoints #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mikeruu merged 3 commits into from
Oct 1, 2025
Merged

Fix metric endpoints #20

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
979b9ee
fix: updated service endpoints
mikeruu Sep 30, 2025
3b2f62c
fix: remove extra quote
mikeruu Oct 1, 2025
bb665ae
fix: set listen to 0.0.0.0
mikeruu Oct 1, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions iac/provider/kubespray/main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,6 +86,8 @@ resource "local_file" "k8s_hardening" {
k8s_api_port = var.k8s_api_port
kube_vip_enabled = var.kube_vip_enabled
network_plugin = var.network_plugin
subnet_pods = var.subnet_pods
subnet_nodes = var.subnet_nodes
subnet_join = var.subnet_join
kube_pod_security_exemptions_namespaces = var.kube_pod_security_exemptions_namespaces
kubelet_rotate_server_certificates = var.kubelet_rotate_server_certificates
Expand Down
9 changes: 5 additions & 4 deletions iac/provider/kubespray/templates/hardening.tpl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,15 +76,16 @@ kube_profiling: true
remove_anonymous_access: false

# ## kube-controller-manager
kube_controller_manager_bind_address: 127.0.0.1
kube_controller_manager_bind_address: 0.0.0.0
kube_controller_terminated_pod_gc_threshold: 50
kube_controller_feature_gates: ["RotateKubeletServerCertificate=true"] # False until I figure how to deploy a helm chart after the cni is deployed

## kube-scheduler
kube_scheduler_bind_address: 127.0.0.1
kube_scheduler_bind_address: 0.0.0.0

## etcd
etcd_deployment_type: kubeadm
etcd_listen_metrics_urls: "http://0.0.0.0:2381"

# ## kubelet
kubelet_authorization_mode_webhook: true
Expand All @@ -111,9 +112,9 @@ kubelet_csr_approver_values:
# # to specify the IP from which the kubelet
# # will receive the packets.
%{ if network_plugin == "kube-ovn" ~}
kubelet_secure_addresses: "localhost link-local {{ kube_pods_subnets | regex_replace(',', ' ') }} {{ kube_node_addresses }} {{ loadbalancer_apiserver.address | default('') }} ${subnet_join}"
kubelet_secure_addresses: "localhost link-local ${subnet_pods} ${subnet_nodes} ${vrrp_ip} ${subnet_join}"
%{ else ~}
kubelet_secure_addresses: "localhost link-local {{ kube_pods_subnets | regex_replace(',', ' ') }} {{ kube_node_addresses }} {{ loadbalancer_apiserver.address | default('') }}"
kubelet_secure_addresses: "localhost link-local ${subnet_pods} ${subnet_nodes} ${vrrp_ip}"
%{ endif ~}
# # additional configurations
kube_owner: root
Expand Down
Loading