github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

disable the apiserver insecure port by default in configure-helper

Browse Source
This commit is contained in:
Jake Sanders
2019-05-06 19:23:50 -07:00
parent ff4c372eaa
commit e4d521e825
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cluster/gce/gci/configure-helper.sh
View File

@@ -1540,7 +1540,7 @@ function start-kube-apiserver {
params+=" --etcd-keyfile=${ETCD_APISERVER_CLIENT_KEY_PATH}" params+=" --etcd-keyfile=${ETCD_APISERVER_CLIENT_KEY_PATH}"
fi fi
params+=" --secure-port=443" params+=" --secure-port=443"
if [[ "${ENABLE_APISERVER_INSECURE_PORT:-true}" != "true" ]]; then if [[ "${ENABLE_APISERVER_INSECURE_PORT:-false}" != "true" ]]; then
# Default is :8080 # Default is :8080
params+=" --insecure-port=0" params+=" --insecure-port=0"
fi fi
@@ -2886,7 +2886,7 @@ function main() {
KUBE_CONTROLLER_MANAGER_TOKEN="$(secure_random 32)" KUBE_CONTROLLER_MANAGER_TOKEN="$(secure_random 32)"
KUBE_SCHEDULER_TOKEN="$(secure_random 32)" KUBE_SCHEDULER_TOKEN="$(secure_random 32)"
KUBE_CLUSTER_AUTOSCALER_TOKEN="$(secure_random 32)" KUBE_CLUSTER_AUTOSCALER_TOKEN="$(secure_random 32)"
if [[ "${ENABLE_APISERVER_INSECURE_PORT:-true}" != "true" ]]; then if [[ "${ENABLE_APISERVER_INSECURE_PORT:-false}" != "true" ]]; then
KUBE_BOOTSTRAP_TOKEN="$(secure_random 32)" KUBE_BOOTSTRAP_TOKEN="$(secure_random 32)"
fi fi
if [[ "${ENABLE_L7_LOADBALANCING:-}" == "glbc" ]]; then if [[ "${ENABLE_L7_LOADBALANCING:-}" == "glbc" ]]; then