Merge "cluster: disable unauthenticated read only port on kubelets"

2019-09-02 14:33:13 +00:00 · 2019-09-02 14:33:13 +00:00 · 8c009bb302
parent c349ccf2fd 42553cd044
commit 8c009bb302
1 changed files with 2 additions and 1 deletions
--- a/cluster/nix/cluster-configuration.nix
+++ b/cluster/nix/cluster-configuration.nix
@ -221,7 +221,8 @@ in rec {
      kubeconfig = pki.kube.kubelet.config;
      extraOpts = ''
        --cni-conf-dir=/opt/cni/conf \
-        --cni-bin-dir=/opt/cni/bin
+        --cni-bin-dir=/opt/cni/bin \
+        --read-only-port=0
      '';
    };