From 5338cfdce4c56261bf24590180d588080b1bb496 Mon Sep 17 00:00:00 2001 From: Firas Mosbehi Date: Fri, 6 Mar 2026 10:37:29 +0100 Subject: [PATCH] prometheus-node-exporter: make kube-rbac-proxy listen host configurable Signed-off-by: Firas Mosbehi --- charts/prometheus-node-exporter/Chart.yaml | 2 +- charts/prometheus-node-exporter/templates/daemonset.yaml | 2 +- charts/prometheus-node-exporter/values.yaml | 3 +++ 3 files changed, 5 insertions(+), 2 deletions(-) diff --git a/charts/prometheus-node-exporter/Chart.yaml b/charts/prometheus-node-exporter/Chart.yaml index 8090034a63b2..2e66f3c10f02 100644 --- a/charts/prometheus-node-exporter/Chart.yaml +++ b/charts/prometheus-node-exporter/Chart.yaml @@ -6,7 +6,7 @@ keywords: - prometheus - exporter type: application -version: 4.52.0 +version: 4.52.1 # renovate: github=prometheus/node_exporter appVersion: 1.10.2 home: https://github.com/prometheus/node_exporter/ diff --git a/charts/prometheus-node-exporter/templates/daemonset.yaml b/charts/prometheus-node-exporter/templates/daemonset.yaml index 9ab71b840418..196711b971d9 100644 --- a/charts/prometheus-node-exporter/templates/daemonset.yaml +++ b/charts/prometheus-node-exporter/templates/daemonset.yaml @@ -240,7 +240,7 @@ spec: {{- if .Values.kubeRBACProxy.extraArgs }} {{- .Values.kubeRBACProxy.extraArgs | toYaml | nindent 12 }} {{- end }} - - --secure-listen-address=:{{ .Values.service.port}} + - --secure-listen-address={{ .Values.kubeRBACProxy.listenHost }}{{ .Values.service.port}} - --upstream=http://127.0.0.1:{{ $servicePort }}/ - --proxy-endpoints-port={{ .Values.kubeRBACProxy.proxyEndpointsPort }} - --config-file=/etc/kube-rbac-proxy-config/config-file.yaml diff --git a/charts/prometheus-node-exporter/values.yaml b/charts/prometheus-node-exporter/values.yaml index d944ceccb798..5a4fc58b17ba 100644 --- a/charts/prometheus-node-exporter/values.yaml +++ b/charts/prometheus-node-exporter/values.yaml @@ -61,6 +61,9 @@ kubeRBACProxy: # Specify the port used for the Node exporter container (upstream port) port: 8100 + # Host prefix for kube-rbac-proxy secure listen address. + # Keep ":" to listen on all interfaces, or set values like "127.0.0.1:" or "$(POD_IP):". + listenHost: ":" # Specify the name of the container port portName: http # Configure a hostPort. If true, hostPort will be enabled in the container and set to service.port.