From e4d521e82531bfad7e9706a22f34bc93faa1c47a Mon Sep 17 00:00:00 2001 From: Jake Sanders Date: Mon, 6 May 2019 19:23:50 -0700 Subject: [PATCH] disable the apiserver insecure port by default in configure-helper --- cluster/gce/gci/configure-helper.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cluster/gce/gci/configure-helper.sh b/cluster/gce/gci/configure-helper.sh index 6ff75644f0c..a2c9e2bc511 100644 --- a/cluster/gce/gci/configure-helper.sh +++ b/cluster/gce/gci/configure-helper.sh @@ -1540,7 +1540,7 @@ function start-kube-apiserver { params+=" --etcd-keyfile=${ETCD_APISERVER_CLIENT_KEY_PATH}" fi params+=" --secure-port=443" - if [[ "${ENABLE_APISERVER_INSECURE_PORT:-true}" != "true" ]]; then + if [[ "${ENABLE_APISERVER_INSECURE_PORT:-false}" != "true" ]]; then # Default is :8080 params+=" --insecure-port=0" fi @@ -2886,7 +2886,7 @@ function main() { KUBE_CONTROLLER_MANAGER_TOKEN="$(secure_random 32)" KUBE_SCHEDULER_TOKEN="$(secure_random 32)" KUBE_CLUSTER_AUTOSCALER_TOKEN="$(secure_random 32)" - if [[ "${ENABLE_APISERVER_INSECURE_PORT:-true}" != "true" ]]; then + if [[ "${ENABLE_APISERVER_INSECURE_PORT:-false}" != "true" ]]; then KUBE_BOOTSTRAP_TOKEN="$(secure_random 32)" fi if [[ "${ENABLE_L7_LOADBALANCING:-}" == "glbc" ]]; then