From b680cdd0e472608ae0f161d7f6da1799532180cc Mon Sep 17 00:00:00 2001
From: Florian Ruynat <florian234@hotmail.com>
Date: Mon, 27 Jul 2020 09:26:17 +0200
Subject: [PATCH] Move healthz check to secure ports (#6446)
---
roles/kubernetes/master/handlers/main.yml | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/roles/kubernetes/master/handlers/main.yml b/roles/kubernetes/master/handlers/main.yml
index 4c5eba4df..0c4b2a9dd 100644
--- a/roles/kubernetes/master/handlers/main.yml
+++ b/roles/kubernetes/master/handlers/main.yml
@@ -93,7 +93,8 @@
- name: Master | wait for kube-scheduler
uri:
- url: http://localhost:10251/healthz
+ url: https://localhost:10259/healthz
+ validate_certs: no
register: scheduler_result
until: scheduler_result.status == 200
retries: 60
@@ -101,7 +102,8 @@
- name: Master | wait for kube-controller-manager
uri:
- url: http://localhost:10252/healthz
+ url: https://localhost:10257/healthz
+ validate_certs: no
register: controller_manager_result
until: controller_manager_result.status == 200
retries: 60
@@ -111,8 +113,6 @@
uri:
url: "{{ kube_apiserver_endpoint }}/healthz"
validate_certs: no
- client_cert: "{{ kube_apiserver_client_cert }}"
- client_key: "{{ kube_apiserver_client_key }}"
register: result
until: result.status == 200
retries: 60
--
GitLab