• Kubernetes Submit Queue's avatar
    Merge pull request #47195 from dims/bind-cadvisor-on-kubelet-interface · 467705be
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 47922, 47195, 47241, 47095, 47401)
    
    Run cAdvisor on the same interface as kubelet
    
    **What this PR does / why we need it**:
    
    cAdvisor currently binds to all interfaces. Currently the only
    solution is to use iptables to block access to the port. We
    are better off making cAdvisor to bind to the interface that
    kubelet uses for better security.
    
    **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #
    
    Fixes #11710
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    cAdvisor binds only to the interface that kubelet is running on instead of all interfaces.
    ```
    467705be
Name
Last commit
Last update
..
builder Loading commit data...
conformance Loading commit data...
environment Loading commit data...
jenkins Loading commit data...
perftype Loading commit data...
remote Loading commit data...
runner Loading commit data...
services Loading commit data...
system Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
README.md Loading commit data...
allocatable_eviction_test.go Loading commit data...
apparmor_test.go Loading commit data...
benchmark_util.go Loading commit data...
container.go Loading commit data...
container_manager_test.go Loading commit data...
critical_pod_test.go Loading commit data...
density_test.go Loading commit data...
disk_eviction_test.go Loading commit data...
doc.go Loading commit data...
dynamic_kubelet_configuration_test.go Loading commit data...
e2e_node_suite_test.go Loading commit data...
garbage_collector_test.go Loading commit data...
gpus.go Loading commit data...
gubernator.sh Loading commit data...
image_id_test.go Loading commit data...
image_list.go Loading commit data...
inode_eviction_test.go Loading commit data...
kubelet_test.go Loading commit data...
lifecycle_hook_test.go Loading commit data...
local_storage_allocatable_eviction_test.go Loading commit data...
local_storage_isolation_eviction_test.go Loading commit data...
log_path_test.go Loading commit data...
memory_eviction_test.go Loading commit data...
mirror_pod_test.go Loading commit data...
node_container_manager_test.go Loading commit data...
node_problem_detector_linux.go Loading commit data...
pods_container_manager_test.go Loading commit data...
resource_collector.go Loading commit data...
resource_usage_test.go Loading commit data...
restart_test.go Loading commit data...
runtime_conformance_test.go Loading commit data...
security_context_test.go Loading commit data...
simple_mount.go Loading commit data...
summary_test.go Loading commit data...
util.go Loading commit data...
volume_manager_test.go Loading commit data...