github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-25 04:33:26 +00:00
Code Issues Projects Releases Wiki Activity

Restrict service account token metrics to kube-apiserver only.

Browse Source
This commit is contained in:
Jiajie Yang 2020-05-21 15:34:57 -07:00
parent a49da364eb
commit ebbd455b24
2 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cmd/kube-apiserver/app/server.go
View File

@ -300,6 +300,7 @@ func CreateKubeAPIServerConfig(
}) })
s.Metrics.Apply() s.Metrics.Apply()
serviceaccount.RegisterMetrics()
serviceIPRange, apiServerServiceIP, err := master.ServiceIPRange(s.PrimaryServiceClusterIPRange) serviceIPRange, apiServerServiceIP, err := master.ServiceIPRange(s.PrimaryServiceClusterIPRange)
if err != nil { if err != nil {

8
pkg/serviceaccount/metrics.go
View File

@ -17,6 +17,8 @@ limitations under the License.
package serviceaccount package serviceaccount
import ( import (
"sync"
"k8s.io/component-base/metrics" "k8s.io/component-base/metrics"
"k8s.io/component-base/metrics/legacyregistry" "k8s.io/component-base/metrics/legacyregistry"
) )
@ -56,8 +58,12 @@ var (
) )
) )
func init() { var registerMetricsOnce sync.Once
func RegisterMetrics() {
registerMetricsOnce.Do(func() {
legacyregistry.MustRegister(legacyTokensTotal) legacyregistry.MustRegister(legacyTokensTotal)
legacyregistry.MustRegister(staleTokensTotal) legacyregistry.MustRegister(staleTokensTotal)
legacyregistry.MustRegister(validTokensTotal) legacyregistry.MustRegister(validTokensTotal)
})
} }