diff --git a/content/rancher/v2.x/en/security/hardening-2.2/_index.md b/content/rancher/v2.x/en/security/hardening-2.2/_index.md index d0b76fccaa0..f82242d9565 100644 --- a/content/rancher/v2.x/en/security/hardening-2.2/_index.md +++ b/content/rancher/v2.x/en/security/hardening-2.2/_index.md @@ -496,6 +496,8 @@ rke up --config cluster.yml Set the appropriate options for the Kubernetes scheduling service. +**NOTE:** Setting `--address` to `127.0.0.1` will prevent Rancher cluster monitoring from scraping this endpoint. + **Rationale** To address the following controls on the CIS benchmark, the command line options should be set on the Kubernetes scheduler. @@ -547,6 +549,8 @@ rke up --config cluster.yml Set the appropriate arguments on the Kubernetes controller manager. +**NOTE:** Setting `--address` to `127.0.0.1` will prevent Rancher cluster monitoring from scraping this endpoint. + **Rationale** To address the following controls the options need to be passed to the Kubernetes controller manager.