github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-03 09:22:44 +00:00
Code Issues Projects Releases Wiki Activity

use a copy of the config

Browse Source
This commit is contained in:
Michaël Lévesque-Dion 2020-12-02 12:57:17 -05:00
parent 4ab4801139
commit ec271c0e4f
1 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
cmd/kubelet/app/server.go
View File

@ -75,6 +75,7 @@ import (
"k8s.io/kubernetes/pkg/credentialprovider" "k8s.io/kubernetes/pkg/credentialprovider"
"k8s.io/kubernetes/pkg/features" "k8s.io/kubernetes/pkg/features"
"k8s.io/kubernetes/pkg/kubelet" "k8s.io/kubernetes/pkg/kubelet"
kubeletconfig "k8s.io/kubernetes/pkg/kubelet/apis/config"
kubeletconfiginternal "k8s.io/kubernetes/pkg/kubelet/apis/config" kubeletconfiginternal "k8s.io/kubernetes/pkg/kubelet/apis/config"
kubeletscheme "k8s.io/kubernetes/pkg/kubelet/apis/config/scheme" kubeletscheme "k8s.io/kubernetes/pkg/kubelet/apis/config/scheme"
kubeletconfigvalidation "k8s.io/kubernetes/pkg/kubelet/apis/config/validation" kubeletconfigvalidation "k8s.io/kubernetes/pkg/kubelet/apis/config/validation"
@ -263,12 +264,8 @@ HTTP server: The kubelet can also listen for HTTP and respond to a simple API
// set up signal context here in order to be reused by kubelet and docker shim // set up signal context here in order to be reused by kubelet and docker shim
ctx := genericapiserver.SetupSignalContext() ctx := genericapiserver.SetupSignalContext()
// make kubelet configuration safe for logging // log the kubelet's config for inspection
for k := range kubeletServer.KubeletConfiguration.StaticPodURLHeader { logConfig(kubeletServer.KubeletConfiguration)
kubeletServer.KubeletConfiguration.StaticPodURLHeader[k] = []string{"<redacted>"}
}
klog.V(5).Infof("KubeletConfiguration: %#v", kubeletServer.KubeletConfiguration)
// run the kubelet // run the kubelet
if err := Run(ctx, kubeletServer, kubeletDeps, utilfeature.DefaultFeatureGate); err != nil { if err := Run(ctx, kubeletServer, kubeletDeps, utilfeature.DefaultFeatureGate); err != nil {
@ -307,6 +304,15 @@ func newFlagSetWithGlobals() *pflag.FlagSet {
return fs return fs
} }
// logConfig logs the kubelet's configuration.
// Special care is taken to avoid logging sensitive parts of the configuration.
func logConfig(config kubeletconfig.KubeletConfiguration) {
for k := range config.StaticPodURLHeader {
config.StaticPodURLHeader[k] = []string{"<redacted>"}
}
klog.V(5).Infof("KubeletConfiguration: %#v", config)
}
// newFakeFlagSet constructs a pflag.FlagSet with the same flags as fs, but where // newFakeFlagSet constructs a pflag.FlagSet with the same flags as fs, but where
// all values have noop Set implementations // all values have noop Set implementations
func newFakeFlagSet(fs *pflag.FlagSet) *pflag.FlagSet { func newFakeFlagSet(fs *pflag.FlagSet) *pflag.FlagSet {