Ensure that the --bind-address argument is set to 127.0.0.1 (Scheduler)
Do not bind the scheduler service to non-loopback insecure addresses. The Scheduler API service which runs on port 10251/TCP by default is used for health and metrics information and is available without authentication or encryption. As such it should only be bound to a localhost interface, to minimize the cluster's attack surface
Updated 7 months ago