cloud-config-kubernetes.yaml

#cloud-config

hostname: coreos0

users:
  - name: core
    passwd: $6$rounds=4096$euhgcZSU7A0$pvKQozbZ/9PtrilpQhSKyyGMf7BZzjW7JT7nBWKSSphWUFd4bXX7ck89UX6K4S/4gSq.Z0lPN8Uj3DQAnDdEN/
    groups:
      - sudo
      - docker

write-files:
  - path: /etc/conf.d/nfs
    permissions: '0644'
    content: |
      OPTS_RPC_MOUNTD=""
  - path: /opt/bin/wupiao
    permissions: '0755'
    content: |
      #!/bin/bash
      # [w]ait [u]ntil [p]ort [i]s [a]ctually [o]pen
      [ -n "$1" ] && \
        until curl -o /dev/null -sIf http://${1}; do \
          sleep 1 && echo .;
        done;
      exit $?

coreos:
    etcd2:
      name: master
      listen-client-urls: http://0.0.0.0:2379,http://0.0.0.0:4001
      advertise-client-urls: http://10.115.77.86:2379,http://10.115.77.86:4001
      initial-cluster-token: k8s_etcd
      listen-peer-urls: http://$private_ipv4:2380,http://10.115.77.86:7001
      initial-advertise-peer-urls: http://10.115.77.86:2380
      initial-cluster: master=http://10.115.77.86:2380
      initial-cluster-state: new
    fleet:
      metadata: "role=master"
    units:
      - name: systemd-networkd.service
        command: stop
      - name: down-interfaces.service
        command: start
        content: |
          [Service]
          Type=oneshot
          ExecStart=/usr/bin/ip link set eth0 down
          ExecStart=/usr/bin/ip addr flush dev eth0
      - name: systemd-networkd.service
        command: start
      - name: 10-static.network
        content: |
          [Match]
          MACAddress=52:54:00:a2:99:99

          [Network]
          DHCP=no
          Address=10.115.77.86/16
          Gateway=10.115.255.253
          DNS=192.168.11.253

          [Route]
          Destination=10.0.0.0/8
          Gateway=10.115.255.254

          [Route]
          Destination=192.168.0.0/17
          Gateway=10.115.255.254
      - name: generate-serviceaccount-key.service
        command: start
        content: |
          [Unit]
          Description=Generate service-account key file
  
          [Service]
          ExecStartPre=-/usr/bin/mkdir -p /opt/bin
          ExecStart=/bin/openssl genrsa -out /opt/bin/kube-serviceaccount.key 2048 2>/dev/null
          RemainAfterExit=yes
          Type=oneshot
      - name: setup-network-environment.service
        command: start
        content: |
          [Unit]
          Description=Setup Network Environment
          Documentation=https://github.com/kelseyhightower/setup-network-environment
          Requires=network-online.target
          After=network-online.target
  
          [Service]
          ExecStartPre=-/usr/bin/mkdir -p /opt/bin
          ExecStartPre=/usr/bin/curl -L -o /opt/bin/setup-network-environment -z /opt/bin/setup-network-environment https://github.com/kelseyhightower/setup-network-environment/releases/download/v1.0.0/setup-network-environment
          ExecStartPre=/usr/bin/chmod +x /opt/bin/setup-network-environment
          ExecStart=/opt/bin/setup-network-environment
          RemainAfterExit=yes
          Type=oneshot
      - name: fleet.service
        command: start
      - name: flanneld.service
        command: start
        drop-ins:
          - name: 50-network-config.conf
            content: |
              [Unit]
              Requires=etcd2.service
              [Service]
              ExecStartPre=/usr/bin/etcdctl set /coreos.com/network/config '{"Network":"10.244.0.0/16", "Backend": {"Type": "vxlan"}}'
      - name: docker.service
        command: start
      - name: kube-apiserver.service
        command: start
        content: |
          [Unit]
          Description=Kubernetes API Server
          Documentation=https://github.com/GoogleCloudPlatform/kubernetes
          Requires=setup-network-environment.service etcd2.service generate-serviceaccount-key.service
          After=setup-network-environment.service etcd2.service generate-serviceaccount-key.service
  
          [Service]
          EnvironmentFile=/etc/network-environment
          ExecStartPre=-/usr/bin/mkdir -p /opt/bin
          ExecStartPre=/usr/bin/curl -L -o /opt/bin/kube-apiserver -z /opt/bin/kube-apiserver https://storage.googleapis.com/kubernetes-release/release/v0.19.3/bin/linux/amd64/kube-apiserver
          ExecStartPre=/usr/bin/chmod +x /opt/bin/kube-apiserver
          ExecStartPre=/opt/bin/wupiao 127.0.0.1:2379/v2/machines
          ExecStart=/opt/bin/kube-apiserver \
          --service_account_key_file=/opt/bin/kube-serviceaccount.key \
          --service_account_lookup=false \
          --admission_control=NamespaceLifecycle,NamespaceAutoProvision,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota \
          --runtime_config=api/v1 \
          --allow_privileged=true \
          --insecure_bind_address=0.0.0.0 \
          --insecure_port=8080 \
          --kubelet_https=true \
          --secure_port=6443 \
          --service-cluster-ip-range=10.100.0.0/16 \
          --etcd_servers=http://127.0.0.1:2379 \
          --public_address_override=10.115.77.86 \
          --logtostderr=true
          Restart=always
          RestartSec=10
      - name: kube-controller-manager.service
        command: start
        content: |
          [Unit]
          Description=Kubernetes Controller Manager
          Documentation=https://github.com/GoogleCloudPlatform/kubernetes
          Requires=kube-apiserver.service
          After=kube-apiserver.service
  
          [Service]
          ExecStartPre=/usr/bin/curl -L -o /opt/bin/kube-controller-manager -z /opt/bin/kube-controller-manager https://storage.googleapis.com/kubernetes-release/release/v0.19.3/bin/linux/amd64/kube-controller-manager
          ExecStartPre=/usr/bin/chmod +x /opt/bin/kube-controller-manager
          ExecStart=/opt/bin/kube-controller-manager \
          --service_account_private_key_file=/opt/bin/kube-serviceaccount.key \
          --master=127.0.0.1:8080 \
          --logtostderr=true
          Restart=always
          RestartSec=10
      - name: kube-scheduler.service
        command: start
        content: |
          [Unit]
          Description=Kubernetes Scheduler
          Documentation=https://github.com/GoogleCloudPlatform/kubernetes
          Requires=kube-apiserver.service
          After=kube-apiserver.service
  
          [Service]
          ExecStartPre=/usr/bin/curl -L -o /opt/bin/kube-scheduler -z /opt/bin/kube-scheduler https://storage.googleapis.com/kubernetes-release/release/v0.19.3/bin/linux/amd64/kube-scheduler
          ExecStartPre=/usr/bin/chmod +x /opt/bin/kube-scheduler
          ExecStart=/opt/bin/kube-scheduler --master=127.0.0.1:8080
          Restart=always
          RestartSec=10
    update:
      group: alpha
      reboot-strategy: off