kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Use TLS for kubescheduler health check as of k8s 1.23

This commit is contained in:
Ole Markus With 2021-09-16 07:46:16 +02:00
parent d9f21f94af
commit 29771b73c1
1 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
nodeup/pkg/model/kube_scheduler.go
View File

@ -218,18 +218,22 @@ func (b *KubeSchedulerBuilder) buildPod(kubeScheduler *kops.KubeSchedulerConfig)
image = strings.Replace(image, "-amd64", "-"+string(b.Architecture), 1)
}
healthAction := &v1.HTTPGetAction{
Host: "127.0.0.1",
Path: "/healthz",
Port: intstr.FromInt(10251),
}
if b.IsKubernetesGTE("1.23") {
healthAction.Port = intstr.FromInt(10259)
healthAction.Scheme = v1.URISchemeHTTPS
}
container := &v1.Container{
Name: "kube-scheduler",
Image: image,
Env: proxy.GetProxyEnvVars(b.Cluster.Spec.EgressProxy),
LivenessProbe: &v1.Probe{
Handler: v1.Handler{
HTTPGet: &v1.HTTPGetAction{
Host: "127.0.0.1",
Path: "/healthz",
Port: intstr.FromInt(10251),
},
},
Handler: v1.Handler{HTTPGet: healthAction},
InitialDelaySeconds: 15,
TimeoutSeconds: 15,
},