scottk/kubernetes
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/kubernetes.git synced 2025-11-03 19:58:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Restrict service account token metrics to kube-apiserver only.

Browse Source
This commit is contained in:
Jiajie Yang
2020-05-21 15:34:57 -07:00
parent a49da364eb
commit ebbd455b24
2 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
cmd/kube-apiserver/app/server.go
View File

@@ -300,6 +300,7 @@ func CreateKubeAPIServerConfig(
}) })
s.Metrics.Apply() s.Metrics.Apply()
serviceaccount.RegisterMetrics()
serviceIPRange, apiServerServiceIP, err := master.ServiceIPRange(s.PrimaryServiceClusterIPRange) serviceIPRange, apiServerServiceIP, err := master.ServiceIPRange(s.PrimaryServiceClusterIPRange)
if err != nil { if err != nil {

14
pkg/serviceaccount/metrics.go
View File

@@ -17,6 +17,8 @@ limitations under the License.
package serviceaccount package serviceaccount
import ( import (
"sync"
"k8s.io/component-base/metrics" "k8s.io/component-base/metrics"
"k8s.io/component-base/metrics/legacyregistry" "k8s.io/component-base/metrics/legacyregistry"
) )
@@ -56,8 +58,12 @@ var (
) )
) )
func init() { var registerMetricsOnce sync.Once
legacyregistry.MustRegister(legacyTokensTotal)
legacyregistry.MustRegister(staleTokensTotal) func RegisterMetrics() {
legacyregistry.MustRegister(validTokensTotal) registerMetricsOnce.Do(func() {
legacyregistry.MustRegister(legacyTokensTotal)
legacyregistry.MustRegister(staleTokensTotal)
legacyregistry.MustRegister(validTokensTotal)
})
} }