[Unit] Description=Kubernetes Kubelet Documentation=https://github.com/GoogleCloudPlatform/kubernetes After=docker.service Requires=docker.service [Service] WorkingDirectory=/var/lib/kubelet ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/cpuset/system.slice/kubelet.service ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/hugetlb/system.slice/kubelet.service ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/memory/system.slice/kubelet.service ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/pids/system.slice/kubelet.service ExecStart={{ bin_dir }}/kubelet \ --address={{ inventory_hostname }} \ --allow-privileged=true \ --anonymous-auth=false \ --authentication-token-webhook \ --authorization-mode=Webhook \ --client-ca-file={{ ca_dir }}/ca.pem \ --cluster-dns={{ CLUSTER_DNS_SVC_IP }} \ --cluster-domain={{ CLUSTER_DNS_DOMAIN }} \ --cni-bin-dir={{ bin_dir }} \ --cni-conf-dir=/etc/cni/net.d \ --fail-swap-on=false \ --hairpin-mode hairpin-veth \ --hostname-override={{ inventory_hostname }} \ --kubeconfig=/etc/kubernetes/kubelet.kubeconfig \ --max-pods={{ MAX_PODS }} \ --network-plugin=cni \ --pod-infra-container-image={{ SANDBOX_IMAGE }} \ --register-node=true \ --root-dir={{ KUBELET_ROOT_DIR }} \ --tls-cert-file={{ ca_dir }}/kubelet.pem \ --tls-private-key-file={{ ca_dir }}/kubelet-key.pem \ --cgroups-per-qos=true \ --cgroup-driver=cgroupfs \ --enforce-node-allocatable=pods,kube-reserved \ --kube-reserved={{ KUBE_RESERVED }} \ --kube-reserved-cgroup=/system.slice/kubelet.service \ --eviction-hard={{ HARD_EVICTION }} \ --v=2 Restart=on-failure RestartSec=5 [Install] WantedBy=multi-user.target