kubespray
kubespray copied to clipboard
Add Node IPs to kubelet systemd service allowed IP addresses for cluster hardening
What type of PR is this? /kind bug
What this PR does / why we need it:
Get all node IPs to the list of allowed IP addresses IPAddressAllow in the kubelet.service configuration to resolve an issue preventing kube-proxy pods from starting correctly when kubelet_systemd_hardening: true is applied to Kubernetes clusters.
Which issue(s) this PR fixes:
Fixes #11289
Special notes for your reviewer:
Does this PR introduce a user-facing change?:
None