calico: listen for metrics only on host IP
To avoid exposing it to the internet if firewall rules are wrongly
configured.
@@ -135,6 +135,10 @@ spec:
value: "true"
- name: FELIX_PROMETHEUSMETRICSENABLED
value: "true"
+ - name: FELIX_PROMETHEUSMETRICSHOST
+ valueFrom:
+ fieldRef:
+ fieldPath: status.hostIP
securityContext:
privileged: true
resources:
