kubespray
kubespray copied to clipboard
change/ingress-nginx hardening and upgrade to v1.10.0
What type of PR is this?
/kind cleanup
What this PR does / why we need it:
- Removes hostPorts from DaemonSet when ingress_nginx_host_network is set to false,
- Added security features that are required when host network is set to false, and removes privileges, when host network is not used,
- Added prometheus metrics port to service,
- Upgraded ingress-nginx version to v1.10.0
Does this PR introduce a user-facing change?:
NONE