- 积分
- 16843
在线时间 小时
最后登录1970-1-1
|

楼主 |
发表于 2025-1-3 08:00:01
|
显示全部楼层
kubeadm-config.yaml' A( ]8 _! v8 {* {0 R; F
8 Z1 o! \' s9 p, l6 i8 X! D
apiVersion: kubeadm.k8s.io/v1beta1
/ j& j, n1 U+ I, [! y( akind: ClusterConfiguration- s* Y- q7 ]+ V& x. A
kubernetesVersion: v1.14.3 # change according to kubeadm supported version
- a/ F' H& _8 @ L" o" b4 g8 r' ?apiServer:+ b1 u: i+ r4 {% z b. o1 A* ^# j( i
certSANs:
, q; q; y- h: U3 }0 ?* V0 T" B' H4 c - 127.0.0.1
c) j' w6 h; I' }# ] - cluster-api.example.com # change according to your requirements
! ]; R4 M5 k5 X( `9 G3 b) y extraArgs:
! m& G A/ S- R authorization-mode: Node,RBAC
2 s Y; ~6 V% E% q: S) V feature-gates: "TTLAfterFinished=true"
1 [# t+ D! x/ [1 e/ { audit-policy-file: "/etc/kubernetes/audit-policy.yaml"
, X: ~. Q% E/ Y+ q3 R audit-log-path: "/etc/kubernetes/audit/kube-apiserver-audit.log"0 m1 A/ ^, P% E) y8 N0 S8 I
audit-log-maxage: "2"9 ]7 a: Y8 |& N7 E0 n: E# E" q2 l
extraVolumes:
( q ^4 j- Z5 q% W% v/ q - name: "audit-policy"
# O7 O5 J8 @/ e) u hostPath: "/etc/kubernetes/audit-policy.yaml"
; d% L% |( q7 ` mountPath: "/etc/kubernetes/audit-policy.yaml"
/ \1 Q1 G$ o+ f4 b readOnly: false, r% `2 W. {/ ^( `1 P X# H
pathType: File
7 d$ e1 ?& ?9 ]) O5 Y" ^" t* ^/ ~ F! v - name: "audit-volume"3 Y7 Z2 z5 q! j
hostPath: "/var/log/kubernetes/audit"
2 S' u* C5 O+ u mountPath: "/etc/kubernetes/audit"4 C/ e$ s4 h* i7 j- J; }3 q
readOnly: false3 }6 }# R! R1 D. P3 H8 X, b
pathType: DirectoryOrCreate
) @, E2 \$ k+ E- S timeoutForControlPlane: 4m0s
: O! _# D% d$ Q7 Q2 U7 L7 \certificatesDir: /etc/kubernetes/pki
1 j: i2 L( G" @' Z z: \) TclusterName: kubernetes
/ o4 _! n; {- _) t. z1 N g4 rcontrolPlaneEndpoint: ""
$ e. V G) f- `. d+ C# ]controllerManager: ) s% u- @$ u( D4 F4 A. C, r |8 Y
extraArgs:3 H0 u/ n# C- b+ ]; `
feature-gates: "TTLAfterFinished=true"0 P% i* e H. r& j' h& V
bind-address: 0.0.0.0
; R) d7 J: ~# z( V7 Ddns:; Y0 i/ c4 M' V. X% \
type: CoreDNS
( ^9 {; o2 C+ D @- aetcd:: u4 h) ]: _: D9 I+ }
local:
0 c1 K+ K# x, `( I& _ dataDir: /var/lib/etcd/ p1 ^, G0 u% Q$ T9 I7 J8 d
imageRepository: k8s.gcr.io
( G0 I: f3 D h* J$ W- Wnetworking:2 x& m6 |: Q9 i7 q$ |
dnsDomain: cluster.local
6 x* s/ d$ l* V8 w4 ?3 o' k podSubnet: 192.168.0.0/16 # change according to your requirements; S6 U9 K. {" a7 s& x
serviceSubnet: 10.96.0.0/12 # change according to your requirements) f& E0 ]' E. y) }6 D
scheduler:( y4 j/ t7 R: @) O# z* D+ \
extraArgs:
2 d- X) U& B$ m% Q$ g. g, G4 s feature-gates: "TTLAfterFinished=true"
) x) Z4 X0 }3 S" @ bind-address: 0.0.0.0- C: |" B$ U: A! K0 Y
---
7 o$ H- E! ~( {. i$ zapiVersion: kubelet.config.k8s.io/v1beta1
7 J* G; C& a$ }4 f) x6 n4 c$ ckind: KubeletConfiguration; v& N" p+ V' ]8 b3 H
FeatureGates:4 Z+ `" S( R" D4 x y2 d1 T1 y
TTLAfterFinished: true |
|