apiVersion: v1
kind: Pod
metadata:
  name: etcd
  namespace: kube-system
  labels:
    component: etcd
spec:
  hostNetwork: true
  containers:
    - name: etcd
      image: registry.k8s.io/etcd:3.6.4-0
      command:
        - etcd
        - --name=controlplane
        - --data-dir=/var/lib/etcd
        - --listen-client-urls=http://127.0.0.1:2379,https://10.0.0.10:2379
        - --advertise-client-urls=https://10.0.0.10:2379
        - --initial-advertise-peer-urls=https://10.0.0.10:2380
        - --listen-peer-urls=https://10.0.0.10:2380
        - --initial-cluster=controlplane=https://10.0.0.10:2380
        - --client-cert-auth=false
        - --trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
        - --cert-file=/etc/kubernetes/pki/etcd/server.crt
        - --key-file=/etc/kubernetes/pki/etcd/server.key
        - --auto-tls=true
        - --peer-client-cert-auth=false
        - --peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
        - --peer-cert-file=/etc/kubernetes/pki/etcd/peer.crt
        - --peer-key-file=/etc/kubernetes/pki/etcd/peer.key
        - --peer-auto-tls=true
        - --listen-metrics-urls=http://0.0.0.0:2381
      volumeMounts:
        - name: etcd-data
          mountPath: /var/lib/etcd
        - name: etcd-certs
          mountPath: /etc/kubernetes/pki/etcd
          readOnly: true
  volumes:
    - name: etcd-data
      hostPath:
        path: /var/lib/etcd
        type: DirectoryOrCreate
    - name: etcd-certs
      hostPath:
        path: /etc/kubernetes/pki/etcd
        type: DirectoryOrCreate