github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-21 19:01:49 +00:00
Code Issues Projects Releases Wiki Activity

Restrict service account token metrics to kube-apiserver only.

Browse Source
This commit is contained in:
Jiajie Yang 2020-05-21 15:34:57 -07:00
parent a49da364eb
commit ebbd455b24
2 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cmd/kube-apiserver/app/server.go
View File

@ -300,6 +300,7 @@ func CreateKubeAPIServerConfig(
})
s.Metrics.Apply()
serviceaccount.RegisterMetrics()
serviceIPRange, apiServerServiceIP, err := master.ServiceIPRange(s.PrimaryServiceClusterIPRange)
if err != nil {

14
pkg/serviceaccount/metrics.go
View File

@ -17,6 +17,8 @@ limitations under the License.
package serviceaccount
import (
"sync"
"k8s.io/component-base/metrics"
"k8s.io/component-base/metrics/legacyregistry"
)
@ -56,8 +58,12 @@ var (
)
)
func init() {
legacyregistry.MustRegister(legacyTokensTotal)
legacyregistry.MustRegister(staleTokensTotal)
legacyregistry.MustRegister(validTokensTotal)
var registerMetricsOnce sync.Once
func RegisterMetrics() {
registerMetricsOnce.Do(func() {
legacyregistry.MustRegister(legacyTokensTotal)
legacyregistry.MustRegister(staleTokensTotal)
legacyregistry.MustRegister(validTokensTotal)
})
}