From d7f46186094c72047fbfa81a4a7a4a62ca3061fc Mon Sep 17 00:00:00 2001
From: Andrey Smirnov <smirnov.andrey@gmail.com>
Date: Mon, 17 May 2021 16:05:14 +0300
Subject: [PATCH] fix: protect metrics-addr by default

As we don't deploy kube-rbac-proxy, protect metrics-addr by binding to
the localhost.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
---
 config/manager/manager.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
index 5edc9d8..c081d89 100644
--- a/config/manager/manager.yaml
+++ b/config/manager/manager.yaml
@@ -19,6 +19,7 @@ spec:
         - command:
             - /manager
           args:
+            - --metrics-addr=127.0.0.1:8080
             - --enable-leader-election
           image: controller:latest
           imagePullPolicy: Always