completed upto lab 38

lab/lesson-37-etcd-insecure.yaml

@@ -0,0 +1,47 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: etcd
+  namespace: kube-system
+  labels:
+    component: etcd
+spec:
+  hostNetwork: true
+  containers:
+    - name: etcd
+      image: registry.k8s.io/etcd:3.6.4-0
+      command:
+        - etcd
+        - --name=controlplane
+        - --data-dir=/var/lib/etcd
+        - --listen-client-urls=http://127.0.0.1:2379,https://10.0.0.10:2379
+        - --advertise-client-urls=https://10.0.0.10:2379
+        - --initial-advertise-peer-urls=https://10.0.0.10:2380
+        - --listen-peer-urls=https://10.0.0.10:2380
+        - --initial-cluster=controlplane=https://10.0.0.10:2380
+        - --client-cert-auth=false
+        - --trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
+        - --cert-file=/etc/kubernetes/pki/etcd/server.crt
+        - --key-file=/etc/kubernetes/pki/etcd/server.key
+        - --auto-tls=true
+        - --peer-client-cert-auth=false
+        - --peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
+        - --peer-cert-file=/etc/kubernetes/pki/etcd/peer.crt
+        - --peer-key-file=/etc/kubernetes/pki/etcd/peer.key
+        - --peer-auto-tls=true
+        - --listen-metrics-urls=http://0.0.0.0:2381
+      volumeMounts:
+        - name: etcd-data
+          mountPath: /var/lib/etcd
+        - name: etcd-certs
+          mountPath: /etc/kubernetes/pki/etcd
+          readOnly: true
+  volumes:
+    - name: etcd-data
+      hostPath:
+        path: /var/lib/etcd
+        type: DirectoryOrCreate
+    - name: etcd-certs
+      hostPath:
+        path: /etc/kubernetes/pki/etcd
+        type: DirectoryOrCreate