fix: protect metrics-addr by default

As we don't deploy kube-rbac-proxy, protect metrics-addr by binding to the localhost. Signed-off-by: Andrey Smirnov <[email protected]>
siderolabs · May 17, 2021 · d7f4618 · d7f4618
1 parent 7b963e1
commit d7f4618
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -19,6 +19,7 @@ spec:
         - command:
             - /manager
           args:
+            - --metrics-addr=127.0.0.1:8080
             - --enable-leader-election
           image: controller:latest
           imagePullPolicy: Always