添加kubelet根目录

pull/317/head
lusyoe 2018-08-29 22:16:50 +08:00 committed by jmgao
parent 36d1034600
commit 2b4d92a07a
2 changed files with 3 additions and 0 deletions

View File

@ -1,3 +1,5 @@
# 默认使用kube-proxy的 'iptables' 模式,可选 'ipvs' 模式(experimental)
PROXY_MODE: "iptables"
# Kubelet 根目录
KUBELET_ROOT_DIR: "/var/lib/kubelet"

View File

@ -25,6 +25,7 @@ ExecStart={{ bin_dir }}/kubelet \
--fail-swap-on=false \
--anonymous-auth=false \
--logtostderr=true \
--root-dir={{ KUBELET_ROOT_DIR }} \
--v=2
#kubelet cAdvisor 默认在所有接口监听 4194 端口的请求, 以下iptables限制内网访问
ExecStartPost=/sbin/iptables -A INPUT -s 10.0.0.0/8 -p tcp --dport 4194 -j ACCEPT