Update the default value of the bearer_token parameter (#10708)

to send the bearer token only to secure https endpoints and not to clear text http endpoints.
DataDog · Dec 29, 2021 · 3e1f71e · 3e1f71e
1 parent 82a3e20
commit 3e1f71e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 5 deletions.
diff --git a/kube_controller_manager/assets/configuration/spec.yaml b/kube_controller_manager/assets/configuration/spec.yaml
@@ -103,13 +103,15 @@ files:
         against the APIServer to retrieve metrics.
       enabled: true
       value:
-        type: boolean
-        example: true
+        example: tls_only
         display_default: false
+        anyOf:
+        - type: boolean
+        - type: string
     - name: ssl_verify
       description: Used to verify self signed certificates.
       enabled: true
       value:
         type: boolean
         example: false
-        display_default: true
+        display_default: true
diff --git a/kube_controller_manager/datadog_checks/kube_controller_manager/data/auto_conf.yaml b/kube_controller_manager/datadog_checks/kube_controller_manager/data/auto_conf.yaml
@@ -31,11 +31,11 @@ instances:
     #
     # prometheus_url: http://%%host%%:10252/metrics
 
-    ## @param bearer_token_auth - boolean - optional - default: false
+    ## @param bearer_token_auth - boolean or string - optional - default: false
     ## Used if you are using RBACs and need the Agent to authenticate
     ## against the APIServer to retrieve metrics.
     #
-    bearer_token_auth: true
+    bearer_token_auth: tls_only
 
     ## @param ssl_verify - boolean - optional - default: true
     ## Used to verify self signed certificates.