|
|
楼主 |
发表于 2025-1-3 08:00:01
|
显示全部楼层
kubeadm-config.yaml- h; _6 A0 G/ m# n6 P% g1 |
' K2 r; f: D! N: F& b, }& A
apiVersion: kubeadm.k8s.io/v1beta1
0 D# ^6 Z7 F3 y# _: R/ zkind: ClusterConfiguration
' O) y6 @% d0 ?; Z8 UkubernetesVersion: v1.14.3 # change according to kubeadm supported version; \& A0 X& E4 f
apiServer:
1 R/ @# n/ u! A \9 b3 m0 w certSANs:2 O9 ]2 i/ ^+ K) I
- 127.0.0.1; Y. [$ D5 u" b0 b' J- w3 D
- cluster-api.example.com # change according to your requirements
. { v5 a5 D! W! T8 O2 \( t% r3 s extraArgs:. a7 v6 {8 t& @! D
authorization-mode: Node,RBAC
7 K$ o5 q- ~+ o. | feature-gates: "TTLAfterFinished=true"
3 {% C2 s1 B) ?6 ]$ v7 C8 X6 ~2 W audit-policy-file: "/etc/kubernetes/audit-policy.yaml"
* p; Q2 f9 x, Q$ F6 a audit-log-path: "/etc/kubernetes/audit/kube-apiserver-audit.log"8 n( a+ V/ x) q$ o/ ]- ^2 o. G
audit-log-maxage: "2"' I9 D# r1 }; o$ K& }1 I! Z% f; z5 Y/ G
extraVolumes:
3 F. r0 z p8 e8 n' @ - name: "audit-policy"
) _1 g/ e' |* t hostPath: "/etc/kubernetes/audit-policy.yaml"
$ K. e& v7 D. _* [( P mountPath: "/etc/kubernetes/audit-policy.yaml"* G) {4 M" J" ~' W
readOnly: false A* e- s* {) F7 P3 s% g8 I
pathType: File- G" y0 l5 Q4 i, W
- name: "audit-volume"; b2 Z" C1 i" Q; f# `
hostPath: "/var/log/kubernetes/audit"
3 k- s# p3 Z& U" _ mountPath: "/etc/kubernetes/audit"
2 t) W; y, P n8 ~ readOnly: false
# r$ R% x- k1 V) v5 B# b; |- [) { pathType: DirectoryOrCreate7 p4 q9 B2 q4 V9 D( ~, d
timeoutForControlPlane: 4m0s3 F, T# a8 s0 }+ f( `
certificatesDir: /etc/kubernetes/pki! @. f. ?- ]( s7 o# r0 ^
clusterName: kubernetes
) @7 F9 f- y$ U1 LcontrolPlaneEndpoint: ""4 c( o7 k) B/ e8 D4 n
controllerManager:
* T F9 n i2 R) A$ P extraArgs:' v; p" [! `. ]( {/ }5 R& P- Z
feature-gates: "TTLAfterFinished=true"4 l% N2 d/ m) c5 r/ L
bind-address: 0.0.0.04 N B' h! _. |" j2 h
dns:
6 W+ N5 i5 D; M/ P$ y, U& @ type: CoreDNS
8 ]: J- ]" [, B% C9 ]. a2 wetcd:) n* ?% Z2 ~$ ?, V
local:
. k7 r- ^3 a) J: _6 O' t dataDir: /var/lib/etcd5 A4 w; X b! [# e
imageRepository: k8s.gcr.io
3 l8 N, d5 x4 b+ l. I' Onetworking:
# S2 z3 t7 b) T9 p9 I dnsDomain: cluster.local& u4 m7 s# _0 f) q% i( _" s0 P' P$ y
podSubnet: 192.168.0.0/16 # change according to your requirements
9 c! y3 t) ^, L' c# w( C# q serviceSubnet: 10.96.0.0/12 # change according to your requirements4 |' Q7 J1 F4 k* n) z ^0 m! D
scheduler:
! @8 T/ J/ m1 |, O1 l7 d" h extraArgs:
2 e% G4 H! P4 G* d1 {( @, h. j% Q feature-gates: "TTLAfterFinished=true"( p; y6 J4 K d& q" m
bind-address: 0.0.0.02 |1 ]1 q# K1 e* ]8 P+ G
---, z* `9 q: f6 ~: \ a" }8 ^- Q
apiVersion: kubelet.config.k8s.io/v1beta1) M' K# e) I( Z6 V( y
kind: KubeletConfiguration
- z- o3 \- ]# L" c9 iFeatureGates:
9 T5 t5 ] z, | O, B TTLAfterFinished: true |
|