Skip to content

Instantly share code, notes, and snippets.

@cescoferraro
Last active September 16, 2016 00:47
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save cescoferraro/cf93cf53c2060cdd195cd52dea512630 to your computer and use it in GitHub Desktop.
Save cescoferraro/cf93cf53c2060cdd195cd52dea512630 to your computer and use it in GitHub Desktop.
core os
[Unit]
Description=Kubernetes Kubelet
After=docker.service
Requires=docker.service
[Service]
User=root
EnvironmentFile=/home/core/environment
Environment=KUBELET_VERSION=v1.3.6_coreos.0
Environment="RKT_OPTS=--volume=kubeconfig,kind=host,source=/home/core/.kube/config \
--mount volume=kubeconfig,target=~/.kube/config \
--volume=ssl,kind=host,source=/home/core/ssl \
--mount volume=ssl,target=/home/core/ssl \
--volume=data-kubernetes,kind=host,source=/data/kubernetes \
--mount volume=data-kubernetes,target=/data/kubernetes \
--volume=resolv,kind=host,source=/etc/resolv.conf \
--mount volume=resolv,target=/etc/resolv.conf"
ExecStartPre=/usr/bin/mkdir -p /etc/kubernetes/manifests
ExecStart=/usr/lib/coreos/kubelet-wrapper \
--config=/etc/kubernetes/manifests \
--kubeconfig=~/.kube/config \
--address=0.0.0.0 \
--port=10250 \
--allow-privileged=true \
--cluster-dns=10.100.0.10 \
--cluster-domain=cluster.local \
--api-servers=https://${MASTER_PRIVATE}:6443 \
--cert-dir=/home/core/ssl/kubernetes \
--tls-cert-file=/home/core/ssl/kubernetes/server.cert \
--tls-private-key-file=/home/core/ssl/kubernetes/server.key \
--hostname-override=${COREOS_PUBLIC_IPV4} \
--node-labels=role=${NAME},type=ssd \
--alsologtostderr=true \
--register-node
Restart=always
[Install]
WantedBy=multi-user.target
apiVersion: v1
kind: Pod
metadata:
name: kube-proxyyyyy
namespace: kube-system
spec:
hostNetwork: true
containers:
- name: kube-proxy
image: quay.io/coreos/hyperkube:v1.3.6_coreos.0
command:
- /hyperkube
- proxy
- --bind-address=0.0.0.0
- --kubeconfig=/home/core/.kube/config
- --master=https://10.138.96.109:6443
- --logtostderr=true
- --proxy-mode=iptables
- --hostname-override=10.138.96.109
securityContext:
privileged: true
volumeMounts:
- mountPath: /home/core/
name: ssl-certs-kubernetes
readOnly: true
- mountPath: /data/kubernetes
name: kubernetes-password
readOnly: true
- mountPath: /sys
name: sys
readOnly: false
volumes:
- hostPath:
path: /home/core/
name: ssl-certs-kubernetes
- hostPath:
path: /data/kubernetes
name: kubernetes-password
- hostPath:
path: /sys
name: sys
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment