mirror of
https://github.com/puppetmaster/typhoon.git
synced 2024-12-26 18:49:34 +01:00
cbef202eec
* Kubernetes v1.22.0 disabled kube-controller-manager insecure port, which was used internally for Prometheus metrics scraping * Configure Prometheus to discover and scrape endpoints for kube-scheduler and kube-controller-manager via the authenticated https ports, via bearer token * Change firewall ports to allow Prometheus (on worker nodes) to scrape kube-scheduler and kube-controller-manager targets that run on controller(s) with hostNetwork * Disable the insecure port on kube-scheduler
17 lines
309 B
YAML
17 lines
309 B
YAML
# Allow Prometheus to discover service endpoints
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: kube-scheduler
|
|
namespace: kube-system
|
|
spec:
|
|
type: ClusterIP
|
|
clusterIP: None
|
|
selector:
|
|
k8s-app: kube-scheduler
|
|
ports:
|
|
- name: metrics
|
|
protocol: TCP
|
|
port: 10259
|
|
targetPort: 10259
|