kube-apiserver.yaml 2.4 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192
  1. apiVersion: v1
  2. kind: Pod
  3. metadata:
  4. name: kube-apiserver
  5. spec:
  6. hostNetwork: true
  7. containers:
  8. - name: kube-apiserver
  9. image: k8s.gcr.io/kube-apiserver:9680e782e08a1a1c94c656190011bd02
  10. command:
  11. - /bin/sh
  12. - -c
  13. - /usr/local/bin/kube-apiserver --address=127.0.0.1 --etcd-servers=http://127.0.0.1:4001
  14. --cloud-provider=gce --admission-control=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota
  15. --service-cluster-ip-range=10.0.0.0/16 --client-ca-file=/srv/kubernetes/ca.crt
  16. --basic-auth-file=/srv/kubernetes/basic_auth.csv --cluster-name=e2e-test-bburns
  17. --tls-cert-file=/srv/kubernetes/server.cert --tls-private-key-file=/srv/kubernetes/server.key
  18. --secure-port=443 --token-auth-file=/srv/kubernetes/known_tokens.csv --v=2
  19. --allow-privileged=False 1>>/var/log/kube-apiserver.log 2>&1
  20. ports:
  21. - containerPort: 443
  22. hostPort: 443
  23. name: https
  24. - containerPort: 7080
  25. hostPort: 7080
  26. name: http
  27. - containerPort: 8080
  28. hostPort: 8080
  29. name: local
  30. volumeMounts:
  31. - mountPath: /srv/kubernetes
  32. name: srvkube
  33. readOnly: true
  34. - mountPath: /var/log/kube-apiserver.log
  35. name: logfile
  36. - mountPath: /etc/ssl
  37. name: etcssl
  38. readOnly: true
  39. - mountPath: /usr/share/ssl
  40. name: usrsharessl
  41. readOnly: true
  42. - mountPath: /var/ssl
  43. name: varssl
  44. readOnly: true
  45. - mountPath: /usr/ssl
  46. name: usrssl
  47. readOnly: true
  48. - mountPath: /usr/lib/ssl
  49. name: usrlibssl
  50. readOnly: true
  51. - mountPath: /usr/local/openssl
  52. name: usrlocalopenssl
  53. readOnly: true
  54. - mountPath: /etc/openssl
  55. name: etcopenssl
  56. readOnly: true
  57. - mountPath: /etc/pki/tls
  58. name: etcpkitls
  59. readOnly: true
  60. volumes:
  61. - hostPath:
  62. path: /srv/kubernetes
  63. name: srvkube
  64. - hostPath:
  65. path: /var/log/kube-apiserver.log
  66. type: FileOrCreate
  67. name: logfile
  68. - hostPath:
  69. path: /etc/ssl
  70. name: etcssl
  71. - hostPath:
  72. path: /usr/share/ssl
  73. name: usrsharessl
  74. - hostPath:
  75. path: /var/ssl
  76. name: varssl
  77. - hostPath:
  78. path: /usr/ssl
  79. name: usrssl
  80. - hostPath:
  81. path: /usr/lib/ssl
  82. name: usrlibssl
  83. - hostPath:
  84. path: /usr/local/openssl
  85. name: usrlocalopenssl
  86. - hostPath:
  87. path: /etc/openssl
  88. name: etcopenssl
  89. - hostPath:
  90. path: /etc/pki/tls
  91. name: etcpkitls