Add Node IPs to kubelet systemd service allowed IP addresses for clus…

…ter hardening
kubernetes-sigs · Jun 10, 2024 · a720c2b · a720c2b
1 parent f85e969
commit a720c2b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/operations/hardening.md b/docs/operations/hardening.md
@@ -107,7 +107,7 @@ kubelet_systemd_hardening: true
 # IP addresses, kubelet_secure_addresses allows you
 # to specify the IP from which the kubelet
 # will receive the packets.
-kubelet_secure_addresses: "localhost link-local {{ kube_pods_subnet }} 192.168.10.110 192.168.10.111 192.168.10.112"
+kubelet_secure_addresses: "localhost link-local {{ kube_pods_subnet }} {{ groups['all'] | map('extract', hostvars, ['ansible_host']) | join(' ') }}""
 
 # additional configurations
 kube_owner: root