kube-prometheus: Use secure kubelet metrics endpoints

2018-01-08 17:20:45 +01:00
parent e7ec3d2886
commit f7ee14685a
1 changed files with 11 additions and 2 deletions
--- a/manifests/prometheus/prometheus-k8s-service-monitor-kubelet.yaml
+++ b/manifests/prometheus/prometheus-k8s-service-monitor-kubelet.yaml
@@ -7,11 +7,20 @@ metadata:
 spec:
  jobLabel: k8s-app
  endpoints:
-  - port: http-metrics
+  - port: https-metrics
+    scheme: https
    interval: 30s
-  - port: cadvisor
+    tlsConfig:
+      insecureSkipVerify: true
+    bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
+  - port: https-metrics
+    scheme: https
+    path: /metrics/cadvisor
    interval: 30s
    honorLabels: true
+    tlsConfig:
+      insecureSkipVerify: true
+    bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
  selector:
    matchLabels:
      k8s-app: kubelet