2017-11-11 19:14:21 +08:00
|
|
|
|
[Unit]
|
|
|
|
|
|
Description=Kubernetes Kube-Proxy Server
|
|
|
|
|
|
Documentation=https://github.com/GoogleCloudPlatform/kubernetes
|
|
|
|
|
|
After=network.target
|
|
|
|
|
|
|
|
|
|
|
|
[Service]
|
2017-12-06 11:14:22 +08:00
|
|
|
|
# kube-proxy 根据 --cluster-cidr 判断集群内部和外部流量，指定 --cluster-cidr 或 --masquerade-all 选项后
|
|
|
|
|
|
# kube-proxy 会对访问 Service IP 的请求做 SNAT，这个特性与calico 实现 network policy冲突，因此禁用
|
2017-11-11 19:14:21 +08:00
|
|
|
|
WorkingDirectory=/var/lib/kube-proxy
|
|
|
|
|
|
ExecStart={{ bin_dir }}/kube-proxy \
|
|
|
|
|
|
--bind-address={{ NODE_IP }} \
|
|
|
|
|
|
--hostname-override={{ NODE_IP }} \
|
|
|
|
|
|
--kubeconfig=/etc/kubernetes/kube-proxy.kubeconfig \
|
|
|
|
|
|
--logtostderr=true \
|
|
|
|
|
|
--v=2
|
|
|
|
|
|
Restart=on-failure
|
|
|
|
|
|
RestartSec=5
|
|
|
|
|
|
LimitNOFILE=65536
|
|
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
|
WantedBy=multi-user.target
|
