packet: make host kubelet listen on private IP address

To avoid accidental exposing it to the internet. Signed-off-by: Mateusz Gozdek <mateusz@kinvolk.io>
kinvolk · Mar 19, 2020 · c0fed7b · c0fed7b
1 parent 6d9fce7
commit c0fed7b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/assets/lokomotive-kubernetes/packet/flatcar-linux/kubernetes/cl/controller.yaml.tmpl b/assets/lokomotive-kubernetes/packet/flatcar-linux/kubernetes/cl/controller.yaml.tmpl
@@ -129,6 +129,7 @@ systemd:
           --pod-manifest-path=/etc/kubernetes/manifests \
           --read-only-port=0 \
           --register-with-taints=$${NODE_TAINTS} \
+          --address=$${COREOS_PACKET_IPV4_PRIVATE_0} \
           --volume-plugin-dir=/var/lib/kubelet/volumeplugins
         ExecStop=-/usr/bin/rkt stop --uuid-file=/var/cache/kubelet-pod.uuid
         Restart=always

diff --git a/assets/lokomotive-kubernetes/packet/flatcar-linux/kubernetes/workers/cl/worker.yaml.tmpl b/assets/lokomotive-kubernetes/packet/flatcar-linux/kubernetes/workers/cl/worker.yaml.tmpl
@@ -107,6 +107,7 @@ systemd:
             --pod-manifest-path=/etc/kubernetes/manifests \
             --read-only-port=0 \
             --register-with-taints=$${NODE_TAINTS} \
+            --address=$${COREOS_PACKET_IPV4_PRIVATE_0} \
             --volume-plugin-dir=/var/lib/kubelet/volumeplugins"
         ExecStop=-/usr/bin/rkt stop --uuid-file=/var/cache/kubelet-pod.uuid
         Restart=always