Update the default value of the bearer_token parameter

to send the bearer token only to secure https endpoints and not to clear text http endpoints.
DataDog · Nov 23, 2021 · b52a42d · b52a42d
1 parent cd2c541
commit b52a42d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/kube_scheduler/assets/configuration/spec.yaml b/kube_scheduler/assets/configuration/spec.yaml
@@ -77,9 +77,9 @@ files:
         against the APIServer to retrieve metrics.
       enabled: true
       value:
-        type: boolean
-        example: true
-        default: false
+        type: string
+        example: tls_only
+        default: "false"
     - name: bearer_token_path
       description: Used to specify the path where the service account token is located.
       value:

diff --git a/kube_scheduler/datadog_checks/kube_scheduler/data/auto_conf.yaml b/kube_scheduler/datadog_checks/kube_scheduler/data/auto_conf.yaml
@@ -31,11 +31,11 @@ instances:
     #
     # prometheus_url: http://%%host%%:10251/metrics
 
-    ## @param bearer_token_auth - boolean - optional - default: true
+    ## @param bearer_token_auth - boolean - optional - default: tls_only
     ## Used if you are using RBACs and need the Agent to authenticate
     ## against the APIServer to retrieve metrics.
     #
-    bearer_token_auth: true
+    bearer_token_auth: tls_only
 
     ## @param bearer_token_path - string - optional - default: /var/run/secrets/kubernetes.io/serviceaccount/token
     ## Used to specify the path where the service account token is located.