From 05010d23ac7751a17aa26fb5cc011eb4f2127b1e Mon Sep 17 00:00:00 2001 From: Antonio Ojea Date: Sat, 4 Jan 2020 10:51:48 +0100 Subject: [PATCH] clarify apiserver bind-address flag usage From the listen godoc: For TCP networks, if the host in the address parameter is empty or a literal unspecified IP address, Listen listens on all available unicast and anycast IP addresses of the local system. Since the BindNetwork options is "tcp" by default, using an unspecified address doesn't bind the listener to the IP family. --- staging/src/k8s.io/apiserver/pkg/server/options/serving.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/staging/src/k8s.io/apiserver/pkg/server/options/serving.go b/staging/src/k8s.io/apiserver/pkg/server/options/serving.go index 6b2ad79b5a5..e9241061000 100644 --- a/staging/src/k8s.io/apiserver/pkg/server/options/serving.go +++ b/staging/src/k8s.io/apiserver/pkg/server/options/serving.go @@ -143,7 +143,7 @@ func (s *SecureServingOptions) AddFlags(fs *pflag.FlagSet) { fs.IPVar(&s.BindAddress, "bind-address", s.BindAddress, ""+ "The IP address on which to listen for the --secure-port port. The "+ "associated interface(s) must be reachable by the rest of the cluster, and by CLI/web "+ - "clients. If blank, all interfaces will be used (0.0.0.0 for all IPv4 interfaces and :: for all IPv6 interfaces).") + "clients. If blank or an unspecified address (0.0.0.0 or ::), all interfaces will be used.") desc := "The port on which to serve HTTPS with authentication and authorization." if s.Required {