magnum/releasenotes/notes/k8s-prometheus-clusterip-b191fa163e3f1125.yaml
Lingxian Kong 2bbfd52abc [k8s-fedora-atomic] Use ClusterIP for prometheus service
The NodePort type service, by design, bypasses almost all network
security in Kubernetes, so is not recommended to be used in the cloud
enviroment.

This patch changes the prometheus service type from NodePort to ClusterIP.

Story: #2005098
Task: #29712

Change-Id: Ic47a334bcf81afb87a78a5e66db1a988b473a47e
2019-02-28 00:13:28 +13:00

8 lines
296 B
YAML

---
features:
- |
Use ClusterIP as the default Prometheus service type, because the NodePort
type service has the requirement that extra security group rule is properly
configured. Kubernetes cluster administrator could still change the service
type after the cluster creation.