[prometheus addon] Use secure kubelet port

cluster/addons/prometheus/prometheus-configmap.yaml

@@ -37,11 +37,11 @@ data:
       relabel_configs:
       - action: labelmap
         regex: __meta_kubernetes_node_label_(.+)
-      - source_labels: [__address__]
-        action: replace
-        target_label: __address__
-        regex: ([^:;]+):(\d+)
-        replacement: ${1}:10255
+      scheme: https
+      tls_config:
+        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+        insecure_skip_verify: true
+      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
 
     - job_name: kubernetes-nodes-cadvisor
       kubernetes_sd_configs:
@@ -49,11 +49,13 @@ data:
       relabel_configs:
       - action: labelmap
         regex: __meta_kubernetes_node_label_(.+)
-      - source_labels: [__address__]
-        action: replace
-        target_label: __address__
-        regex: ([^:;]+):(\d+)
-        replacement: ${1}:4194
+      - target_label: __metrics_path__
+        replacement: /metrics/cadvisor
+      scheme: https
+      tls_config:
+        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+        insecure_skip_verify: true
+      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
 
     - job_name: kubernetes-service-endpoints
       kubernetes_sd_configs:

cluster/addons/prometheus/prometheus-rbac.yaml

@@ -19,6 +19,7 @@ rules:
       - ""
     resources:
       - nodes
+      - nodes/metrics
       - services
       - endpoints
       - pods