[prometheus addon] Use secure kubelet port

cluster/addons/prometheus/prometheus-configmap.yaml

@@ -37,11 +37,11 @@ data:
       relabel_configs:
       - action: labelmap
         regex: __meta_kubernetes_node_label_(.+)
-      - source_labels: [__address__]
+      scheme: https
-        action: replace
+      tls_config:
-        target_label: __address__
+        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
-        regex: ([^:;]+):(\d+)
+        insecure_skip_verify: true
-        replacement: ${1}:10255
+      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
 
     - job_name: kubernetes-nodes-cadvisor
       kubernetes_sd_configs:
@@ -49,11 +49,13 @@ data:
       relabel_configs:
       - action: labelmap
         regex: __meta_kubernetes_node_label_(.+)
-      - source_labels: [__address__]
+      - target_label: __metrics_path__
-        action: replace
+        replacement: /metrics/cadvisor
-        target_label: __address__
+      scheme: https
-        regex: ([^:;]+):(\d+)
+      tls_config:
-        replacement: ${1}:4194
+        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+        insecure_skip_verify: true
+      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
 
     - job_name: kubernetes-service-endpoints
       kubernetes_sd_configs:

cluster/addons/prometheus/prometheus-rbac.yaml

@@ -19,6 +19,7 @@ rules:
       - ""
     resources:
       - nodes
+      - nodes/metrics
       - services
       - endpoints
       - pods