Move healthz check to secure ports (kubernetes-sigs#6446) (kubernetes…

…-sigs#6457)
floryut · Jul 30, 2020 · 3834fde · 3834fde
1 parent 9a862ae
commit 3834fde
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/roles/kubernetes/master/handlers/main.yml b/roles/kubernetes/master/handlers/main.yml
@@ -93,15 +93,17 @@
 
 - name: Master | wait for kube-scheduler
   uri:
-    url: http://localhost:10251/healthz
+    url: https://localhost:10259/healthz
+    validate_certs: no
   register: scheduler_result
   until: scheduler_result.status == 200
   retries: 60
   delay: 1
 
 - name: Master | wait for kube-controller-manager
   uri:
-    url: http://localhost:10252/healthz
+    url: https://localhost:10257/healthz
+    validate_certs: no
   register: controller_manager_result
   until: controller_manager_result.status == 200
   retries: 60
@@ -111,8 +113,6 @@
   uri:
     url: "{{ kube_apiserver_endpoint }}/healthz"
     validate_certs: no
-    client_cert: "{{ kube_apiserver_client_cert }}"
-    client_key: "{{ kube_apiserver_client_key }}"
   register: result
   until: result.status == 200
   retries: 60