mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-21 10:51:29 +00:00
Use 10250 as targetPort for metrics-server
Metrics-server's usage of privileged port 443 as targetPort requires elevated permissions than necessary and violates principle of least privilege.
This commit is contained in:
parent
87b0412232
commit
3d620192d9
@ -58,9 +58,9 @@ spec:
|
||||
- --kubelet-insecure-tls
|
||||
- --kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP
|
||||
- --cert-dir=/tmp
|
||||
- --secure-port=443
|
||||
- --secure-port=10250
|
||||
ports:
|
||||
- containerPort: 443
|
||||
- containerPort: 10250
|
||||
name: https
|
||||
protocol: TCP
|
||||
readinessProbe:
|
||||
|
Loading…
Reference in New Issue
Block a user