fix(contabo): open inbound kubelet 10250 in ufw so metrics-server can scrape the control-plane - #327
Draft
izzywdev wants to merge 1 commit into
Draft
fix(contabo): open inbound kubelet 10250 in ufw so metrics-server can scrape the control-plane#327izzywdev wants to merge 1 commit into
izzywdev wants to merge 1 commit into
Conversation
… scrape the control-plane metrics-server runs on a worker (vmi3396106) and dials each kubelet directly at <node-ip>:10250 — it does NOT use k3s's 6443 tunnel. vps.tf's cloud-init opened 22/6443/8472/51820 but deliberately omitted 10250 on the wrong premise that "no inbound 10250 is needed", so ufw default-denied the scrape and `kubectl top node vmi3383846` returned <unknown> (issue #318). Node reported Ready with no pressure — this was a firewall drop, not node death. Adds `ufw allow 10250/tcp` as the rebuild bootstrap default (mirrors 8472's Anywhere-then-scope pattern) and corrects the comment. Live prod node already patched out-of-band with node-IP-scoped rules (95.111.238.66 / 185.2.103.122 / 194.163.136.242); `kubectl top node vmi3383846` now returns real metrics. Co-authored-by: Israel Weinberg <99821070+izzywdev@users.noreply.github.com>
Contributor
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Auto-opened from branch
claude/issue-318-20260721-0927.Closes #318