Make use of secure port when accessing Kubelet API

metricbeat/examples/security/values.yaml

@@ -10,7 +10,13 @@ metricbeatConfig:
         - volume
       period: 10s
       host: "${NODE_NAME}"
-      hosts: ["${NODE_NAME}:10255"]
+      hosts: ["https://${NODE_NAME}:10250"]
+      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
+      ssl.verification_mode: "none"
+      # If using Red Hat OpenShift remove ssl.verification_mode entry and
+      # uncomment these settings:
+      #ssl.certificate_authorities:
+        #- /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
       processors:
       - add_kubernetes_metadata:
           in_cluster: true

metricbeat/values.yaml

@@ -13,7 +13,13 @@ metricbeatConfig:
         - volume
       period: 10s
       host: "${NODE_NAME}"
-      hosts: ["${NODE_NAME}:10255"]
+      hosts: ["https://${NODE_NAME}:10250"]
+      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
+      ssl.verification_mode: "none"
+      # If using Red Hat OpenShift remove ssl.verification_mode entry and
+      # uncomment these settings:
+      #ssl.certificate_authorities:
+        #- /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
       processors:
       - add_kubernetes_metadata:
           in_cluster: true
@@ -145,6 +151,7 @@ clusterRoleRules:
     - events
     - deployments
     - nodes
+    - nodes/stats
     - replicasets
     verbs:
     - get