关闭kubelet只读端口

2020-02-01 10:06:07 +08:00 · 2020-02-01 10:06:07 +08:00 · 5a1f5cda97
parent cb35be0417
commit 5a1f5cda97
1 changed files with 2 additions and 2 deletions
--- a/roles/kube-node/templates/kubelet-config.yaml.j2
+++ b/roles/kube-node/templates/kubelet-config.yaml.j2
@ -62,8 +62,8 @@ nodeStatusUpdateFrequency: 10s
 oomScoreAdj: -999
 podPidsLimit: -1
 port: 10250
-# for now 'heapster' needs kubelet's 'readOnlyPort', in the future 'readOnlyPort: 0' will be set
-readOnlyPort: 10255
+# disable readOnlyPort 
+readOnlyPort: 0
 {% if ansible_distribution_release == "bionic" %}
 resolvConf: /run/systemd/resolve/resolv.conf
 {% else %}