Skip to content

Commit d0068ca

Browse files
committed
docs(release): add improved security of metrics-server note to 1.19
- I had brought attention to this issue and mentioned the lack of security details in the release notes in the PR for cc41bba - was requested to submit a PR for this note as well, finally got to pushing this up 😅 - this is good encouragement to switch to the `metrics-server` add-on as it provides better security over a self-install
1 parent 7616f13 commit d0068ca

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

docs/releases/1.19-NOTES.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -72,6 +72,7 @@ has been updated by a newer version of kOps unless it is given the `--allow-kops
7272
### Addons
7373

7474
* Metrics Server is now available as a configurable addon. Add `spec.metricsServer.enabled: true` to the cluster spec to enable.
75+
* This new addon is **more secure** than installing directly via the `metrics-server` Helm chart as kOps automatically provisions and sets TLS certs, avoiding the need to use the `--kubelet-insecure-tls` flag. See [#6879](https://github.com/kubernetes/kops/issues/6879) for more details.
7576

7677
* Cluster Autoscaler is now availalble as a configurable addon. Add `spec.clusterAutoscaler.enabled: true` to the cluster spec to enable.
7778

0 commit comments

Comments
 (0)