Skip to content

Conversation

@pwntr
Copy link
Contributor

@pwntr pwntr commented Oct 27, 2025

and add TODO note to remove the metrics-server legacy port 4443 on the next breaking change

Description

metrics-server uses port 10251 as the default nowadays with the EKS provided bundle that can be installed as an addon. Port 4443 is the legacy port used by it in the past, but not anymore in the releases of the last 3 years. Addresses #3557.

Motivation and Context

Breaking Changes

no breaking change introduced, backwards compatible and just adding another recommended port to be added as a security rule. TODO note added to be considered for the next planned breaking change version bump at v22 to remove the legacy port security group rule then.

How Has This Been Tested?

  • I have tested and validated these changes using one or more of the provided examples/* projects

tested with default metrics-server addon added to the list of addons, without passing any configuration changes

…rity group rules, add TODO note to remove the metrics-server legacy port 4443 on the next breaking change
@pwntr pwntr changed the title add current metrics-server addon default port 10251 to the recommended security group rules fix: add current metrics-server addon default port 10251 to the recommended security group rules Oct 27, 2025
@pwntr pwntr changed the title fix: add current metrics-server addon default port 10251 to the recommended security group rules fix: Add current metrics-server addon default port 10251 to the recommended security group rules Oct 27, 2025
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
@bryantbiggs bryantbiggs changed the title fix: Add current metrics-server addon default port 10251 to the recommended security group rules fix: Add recommended security group rule for port 10251 to match EKS addon for metrics-server Oct 27, 2025
@bryantbiggs bryantbiggs changed the title fix: Add recommended security group rule for port 10251 to match EKS addon for metrics-server feat: Add recommended security group rule for port 10251 to match EKS addon for metrics-server Oct 27, 2025
Copy link
Member

@bryantbiggs bryantbiggs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you

@bryantbiggs bryantbiggs merged commit de8c550 into terraform-aws-modules:master Oct 27, 2025
23 checks passed
antonbabenko pushed a commit that referenced this pull request Oct 27, 2025
## [21.7.0](v21.6.1...v21.7.0) (2025-10-27)

### Features

* Add recommended security group rule for port `10251` to match EKS addon for `metrics-server` ([#3562](#3562)) ([de8c550](de8c550))
@antonbabenko
Copy link
Member

This PR is included in version 21.7.0 🎉

@github-actions
Copy link

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Nov 27, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

metrics-server addon default port 10251 not covered by default security group rules

3 participants