|
|
楼主 |
发表于 2025-1-3 08:00:01
|
显示全部楼层
kubeadm-config.yaml
. _ N- K2 n* o; B( d6 D) R2 X6 d! |* r7 O* {/ V
apiVersion: kubeadm.k8s.io/v1beta1
6 A: J6 \9 V$ L& n6 w& g! H$ c# Dkind: ClusterConfiguration8 J1 s* \ n* C8 e+ a% J6 O
kubernetesVersion: v1.14.3 # change according to kubeadm supported version$ O' k/ W+ e* ?) @
apiServer:
+ \ G o4 w6 v" I/ q certSANs:
/ V( Q: e4 x, A, D7 L( Z - 127.0.0.16 ~& Z) l; Q& l% @" q2 r
- cluster-api.example.com # change according to your requirements0 B2 B. w& e! A- t. V
extraArgs:
1 T( V7 Y5 i- N: \) Y authorization-mode: Node,RBAC
" ?4 M. s( N, R( H0 Z feature-gates: "TTLAfterFinished=true"9 T9 [5 T" R. }" O; b
audit-policy-file: "/etc/kubernetes/audit-policy.yaml"4 W' t s M2 A* @: ]5 k g% |
audit-log-path: "/etc/kubernetes/audit/kube-apiserver-audit.log"
7 ]2 s, H3 i1 |7 n2 j- Y( g) a5 Q audit-log-maxage: "2"
) G) \; V& L/ l: w7 E extraVolumes:
" n, E5 q- r8 h3 n& \- O - name: "audit-policy"
6 G6 Y w3 ^* e9 Y: Z: r0 g. d hostPath: "/etc/kubernetes/audit-policy.yaml"9 Q* T. x- o. d" W) f% ?( g* \
mountPath: "/etc/kubernetes/audit-policy.yaml"
. s8 ^6 K3 B( h2 c readOnly: false) G0 m% j$ [4 Q4 v; X
pathType: File
% {; H# v. X# Q+ `2 ?8 H0 C - name: "audit-volume"
6 g; V$ A' r7 ]7 Z8 X hostPath: "/var/log/kubernetes/audit"; [9 [, g$ G) ?7 z
mountPath: "/etc/kubernetes/audit". U w/ P1 o9 W3 n9 A7 k
readOnly: false
4 i, l }8 w% e8 T6 k pathType: DirectoryOrCreate
: T7 \0 W2 ~# _( j4 U) [2 V3 K timeoutForControlPlane: 4m0s
7 v' y+ ]2 M I' q% Z$ QcertificatesDir: /etc/kubernetes/pki2 p$ @1 V8 P, i7 y9 v2 M7 A
clusterName: kubernetes6 b( P1 M: b1 I' b
controlPlaneEndpoint: ""
3 C4 Y; g) }. f2 gcontrollerManager: ! Z2 l* @7 Z- {1 n' g8 k$ n. {
extraArgs:/ N" B* L2 J* I6 Z; m. ^9 u# v' K" O
feature-gates: "TTLAfterFinished=true"/ i# L- x4 S9 X- o! u9 {' w- p3 G
bind-address: 0.0.0.04 Z7 R6 V$ P, k: T
dns:
! C0 b: ~6 u+ F type: CoreDNS$ W9 ]3 s# B% K
etcd:
- r( Z# {- X1 O. X0 V+ @" _ local:
9 g# ?$ B4 D8 s$ n' K+ s dataDir: /var/lib/etcd _, Z- h. Z' ^$ K8 `1 U# Q
imageRepository: k8s.gcr.io
m( S/ T8 W/ @* i. d: }. Y/ s9 q& rnetworking:3 ]. q( o2 x8 |6 ^& r
dnsDomain: cluster.local T! H' {" |% N8 ^
podSubnet: 192.168.0.0/16 # change according to your requirements2 k9 s; Z, I$ R
serviceSubnet: 10.96.0.0/12 # change according to your requirements
$ L2 z# s* i% y% o, e/ hscheduler:
; i/ d" Y2 N9 H* q" y& E extraArgs:
6 `. V0 Q9 B7 X4 K$ N feature-gates: "TTLAfterFinished=true"0 U; j! w0 p/ y" K; M. Y
bind-address: 0.0.0.0
- _6 x9 L3 ]! W# m9 w% U9 S0 m---
9 u5 j6 } D5 S4 U2 I. FapiVersion: kubelet.config.k8s.io/v1beta1
3 ~& N$ H# f0 W& d$ ~; Ukind: KubeletConfiguration( ^7 r1 H/ y- Z* _
FeatureGates:
/ ]& ~+ s* Q* z& {4 N* {& I( b0 @ TTLAfterFinished: true |
|