huggingface / Google-Cloud-Containers

Hugging Face Deep Learning Containers (DLCs) for Google Cloud
https://hf.co/docs/google-cloud
Apache License 2.0
130 stars 18 forks source link

Disable insecure `kubelet` read-only 10255 port #95

Closed alvarobartt closed 2 months ago

alvarobartt commented 2 months ago

Description

This PR sets the flag --no-autoprovisioning-enable-insecure-kubelet-readonly-port within the gcloud container clusters create-auto command, so that the kubelet read-only port 10255 is not exposed as it's not considered secure.

More information in the Google Kubernetes Engine (GKE) Documentation - Disable the kubelet read-only port in GKE clusters.

Closes #94