32 lines
907 B
YAML
32 lines
907 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: etcd
|
|
namespace: kube-system
|
|
spec:
|
|
hostNetwork: true
|
|
containers:
|
|
- name: etcd
|
|
image: registry.k8s.io/etcd:3.6.4-0
|
|
command:
|
|
- etcd
|
|
- --listen-client-urls=https://127.0.0.1:2379,https://10.0.0.10:2379
|
|
- --client-cert-auth=false
|
|
- --trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
|
|
- --cert-file=/etc/kubernetes/pki/etcd/server.crt
|
|
- --key-file=/etc/kubernetes/pki/etcd/server.key
|
|
- --auto-tls=true
|
|
- --peer-client-cert-auth=true
|
|
- --peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
|
|
- --peer-cert-file=/etc/kubernetes/pki/etcd/peer.crt
|
|
- --peer-key-file=/etc/kubernetes/pki/etcd/peer.key
|
|
volumeMounts:
|
|
- name: etcd-certs
|
|
mountPath: /etc/kubernetes/pki/etcd
|
|
readOnly: true
|
|
volumes:
|
|
- name: etcd-certs
|
|
hostPath:
|
|
path: /etc/kubernetes/pki/etcd
|
|
type: DirectoryOrCreate
|