kube-apiserver.yaml 1.6 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071
  1. apiVersion: v1
  2. kind: Pod
  3. metadata:
  4. name: kube-apiserver
  5. namespace: kube-system
  6. spec:
  7. hostNetwork: true
  8. containers:
  9. - name: kube-apiserver
  10. image: {{kube_docker_registry}}/kube-apiserver:{{kube-apiserver_docker_tag}}
  11. imagePullPolicy: IfNotPresent
  12. resources:
  13. requests:
  14. cpu: 250m
  15. command:
  16. - /bin/sh
  17. - -c
  18. - /usr/local/bin/kube-apiserver
  19. {{params}}
  20. 1>>/var/log/kube-apiserver.log 2>&1
  21. livenessProbe:
  22. httpGet:
  23. host: 127.0.0.1
  24. path: /healthz
  25. port: 8080
  26. scheme: HTTP
  27. initialDelaySeconds: 15
  28. timeoutSeconds: 15
  29. ports:
  30. - name: https
  31. containerPort: 443
  32. hostPort: 443
  33. protocol: TCP
  34. - name: local
  35. containerPort: 8080
  36. hostPort: 8080
  37. protocol: TCP
  38. volumeMounts:
  39. {{audit_policy_config_mount}}
  40. - name: srvkube
  41. mountPath: /etc/srv/kubernetes
  42. readOnly: true
  43. - name: logfile
  44. mountPath: /var/log/kube-apiserver.log
  45. - name: etcssl
  46. mountPath: /etc/ssl
  47. readOnly: true
  48. - name: usrsharecacerts
  49. mountPath: /usr/share/ca-certificates
  50. readOnly: true
  51. - name: srvsshproxy
  52. mountPath: /etc/srv/sshproxy
  53. volumes:
  54. {{audit_policy_config_volume}}
  55. - name: srvkube
  56. hostPath:
  57. path: /etc/srv/kubernetes
  58. - name: logfile
  59. hostPath:
  60. path: /var/log/kube-apiserver.log
  61. type: FileOrCreate
  62. - name: etcssl
  63. hostPath:
  64. path: /etc/ssl
  65. - name: usrsharecacerts
  66. hostPath:
  67. path: /usr/share/ca-certificates
  68. - name: srvsshproxy
  69. hostPath:
  70. path: /etc/srv/sshproxy