This message was deleted.

you can override the default flags for that component with --kube-controller-manager-arg and change the bind-address value to 0.0.0.0 if you’d like to expose it.

would that also expose the metrics port missing on the RKE2 instance?

it’s just bind-address, it doesn’t have a separate listener for metrics

in RKE, the 10252 is an HTTP endpoint vs HTTPS 🤔

it depends on the Kubernetes version. They switched everything over to secure at some point.

seeing that now after validating on an RKE cluster running the same 1.22.9 version. working on updating our scrapers to use the https endpoint with auth now

I don't remember about this one specifically, but I think some had an option for insecure port enable to turn the HTTP port back on (I was looking at some Kubernetes lockdown guidance and it was saying to verify those options weren't present on 3-6 different items).