Skip to content

Commit

Permalink
Add --advertise-address to bootstrap-apiserver manifest.
Browse files Browse the repository at this point in the history
This should ensure that the bootstrap apiserver advertises itself
on the same interface as the kubelet (since hostnetwork = true)
rather than an arbitrary one.

Fixes kubernetes-retired#453.
  • Loading branch information
Diego Pontoriero committed Apr 19, 2017
1 parent f942073 commit 7bb2be3
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions pkg/asset/internal/templates.go
Original file line number Diff line number Diff line change
Expand Up @@ -237,6 +237,7 @@ spec:
- /hyperkube
- apiserver
- --admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota
- --advertise-address=$(POD_IP)
- --allow-privileged=true
- --authorization-mode=RBAC
- --bind-address=0.0.0.0
Expand All @@ -256,6 +257,11 @@ spec:
- --storage-backend=etcd3
- --tls-cert-file=/etc/kubernetes/secrets/apiserver.crt
- --tls-private-key-file=/etc/kubernetes/secrets/apiserver.key
env:
- name: POD_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
volumeMounts:
- mountPath: /etc/ssl/certs
name: ssl-certs-host
Expand Down

0 comments on commit 7bb2be3

Please sign in to comment.