48 lines
1.5 KiB
YAML
48 lines
1.5 KiB
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: etcd
|
|
namespace: kube-system
|
|
labels:
|
|
component: etcd
|
|
spec:
|
|
hostNetwork: true
|
|
containers:
|
|
- name: etcd
|
|
image: registry.k8s.io/etcd:3.6.4-0
|
|
command:
|
|
- etcd
|
|
- --name=controlplane
|
|
- --data-dir=/var/lib/etcd
|
|
- --listen-client-urls=http://127.0.0.1:2379,https://10.0.0.10:2379
|
|
- --advertise-client-urls=https://10.0.0.10:2379
|
|
- --initial-advertise-peer-urls=https://10.0.0.10:2380
|
|
- --listen-peer-urls=https://10.0.0.10:2380
|
|
- --initial-cluster=controlplane=https://10.0.0.10:2380
|
|
- --client-cert-auth=false
|
|
- --trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
|
|
- --cert-file=/etc/kubernetes/pki/etcd/server.crt
|
|
- --key-file=/etc/kubernetes/pki/etcd/server.key
|
|
- --auto-tls=true
|
|
- --peer-client-cert-auth=false
|
|
- --peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
|
|
- --peer-cert-file=/etc/kubernetes/pki/etcd/peer.crt
|
|
- --peer-key-file=/etc/kubernetes/pki/etcd/peer.key
|
|
- --peer-auto-tls=true
|
|
- --listen-metrics-urls=http://0.0.0.0:2381
|
|
volumeMounts:
|
|
- name: etcd-data
|
|
mountPath: /var/lib/etcd
|
|
- name: etcd-certs
|
|
mountPath: /etc/kubernetes/pki/etcd
|
|
readOnly: true
|
|
volumes:
|
|
- name: etcd-data
|
|
hostPath:
|
|
path: /var/lib/etcd
|
|
type: DirectoryOrCreate
|
|
- name: etcd-certs
|
|
hostPath:
|
|
path: /etc/kubernetes/pki/etcd
|
|
type: DirectoryOrCreate
|