Compare commits
23 commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
6fbf567b5c | ||
|
|
52bc6f00b6 | ||
|
|
144db725b4 | ||
|
|
83b74eacc2 | ||
|
|
e344606a01 | ||
|
|
e40c8e5853 | ||
|
|
539a6f6023 | ||
|
|
4277cb959e | ||
|
|
fc0f265950 | ||
|
|
7d337cdc4b | ||
|
|
0c98540f79 | ||
|
|
ec4be2a471 | ||
|
|
336c63b0ec | ||
|
|
9b19a0cf63 | ||
|
|
9503187be3 | ||
|
|
a15e421222 | ||
|
|
1b3f09db93 | ||
|
|
022b3dec4a | ||
|
|
4aaf237c78 | ||
|
|
3a315b7664 | ||
|
|
f5793b7a4f | ||
|
|
f71e732350 | ||
|
|
c088ab6420 |
5 changed files with 7 additions and 223 deletions
22
Dockerfile
22
Dockerfile
|
|
@ -1,25 +1,15 @@
|
|||
FROM registry.fedoraproject.org/kubernetes-master:rawhide
|
||||
FROM registry.fedoraproject.org/f25/kubernetes-master:latest
|
||||
MAINTAINER "Jason Brooks" <jbrooks@redhat.com>
|
||||
|
||||
ENV container=docker
|
||||
|
||||
ENV NAME=kubernetes-apiserver VERSION=0 ARCH=x86_64
|
||||
ENV NAME=kubernetes-apiserver VERSION=0.1 RELEASE=19 ARCH=x86_64
|
||||
LABEL BZComponent="$NAME" \
|
||||
name="$FGC/$NAME" \
|
||||
version="$VERSION" \
|
||||
architecture="$ARCH" \
|
||||
atomic.type='system'
|
||||
Name="$FGC/$NAME" \
|
||||
Version="$VERSION" \
|
||||
Release="$RELEASE.$DISTTAG" \
|
||||
Architecture="$ARCH"
|
||||
|
||||
COPY launch.sh /usr/bin/kube-apiserver-docker.sh
|
||||
|
||||
RUN chmod +x /usr/bin/kube-apiserver
|
||||
|
||||
LABEL RUN /usr/bin/docker/ run -d --net=host -p 443:443
|
||||
|
||||
COPY service.template config.json.template tmpfiles.template /exports/
|
||||
|
||||
RUN mkdir -p /exports/hostfs/usr/local/bin/ && cp /usr/bin/kubectl /exports/hostfs/usr/local/bin/kubectl
|
||||
|
||||
RUN mkdir -p /exports/hostfs/etc/kubernetes && cp /etc/kubernetes/{config,apiserver} /exports/hostfs/etc/kubernetes
|
||||
|
||||
ENTRYPOINT ["/usr/bin/kube-apiserver-docker.sh"]
|
||||
|
|
|
|||
|
|
@ -1,193 +0,0 @@
|
|||
{
|
||||
"ociVersion": "1.0.0",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "amd64"
|
||||
},
|
||||
"process": {
|
||||
"terminal": false,
|
||||
"user": {
|
||||
"uid": 996,
|
||||
"gid": 994
|
||||
},
|
||||
"args": [
|
||||
"/usr/bin/kube-apiserver-docker.sh"
|
||||
],
|
||||
"env": [
|
||||
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
|
||||
"TERM=xterm"
|
||||
],
|
||||
"cwd": "/",
|
||||
"capabilities": {
|
||||
"bounding": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_DAC_READ_SEARCH"
|
||||
],
|
||||
"permitted": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_DAC_READ_SEARCH"
|
||||
],
|
||||
"inheritable": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_DAC_READ_SEARCH"
|
||||
],
|
||||
"effective": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_DAC_READ_SEARCH"
|
||||
],
|
||||
"ambient": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_DAC_READ_SEARCH"
|
||||
]
|
||||
},
|
||||
"rlimits": [
|
||||
{
|
||||
"type": "RLIMIT_NOFILE",
|
||||
"hard": 1024,
|
||||
"soft": 1024
|
||||
}
|
||||
]
|
||||
},
|
||||
"root": {
|
||||
"path": "rootfs",
|
||||
"readonly": true
|
||||
},
|
||||
"mounts": [
|
||||
{
|
||||
"destination": "/proc",
|
||||
"type": "proc",
|
||||
"source": "proc"
|
||||
},
|
||||
{
|
||||
"destination": "/dev",
|
||||
"type": "tmpfs",
|
||||
"source": "tmpfs",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"strictatime",
|
||||
"mode=755",
|
||||
"size=65536k"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/dev/pts",
|
||||
"type": "devpts",
|
||||
"source": "devpts",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"newinstance",
|
||||
"ptmxmode=0666",
|
||||
"mode=0620",
|
||||
"gid=5"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/dev/shm",
|
||||
"type": "tmpfs",
|
||||
"source": "shm",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"nodev",
|
||||
"mode=1777",
|
||||
"size=65536k"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/dev/mqueue",
|
||||
"type": "mqueue",
|
||||
"source": "mqueue",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"nodev"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/sys",
|
||||
"type": "sysfs",
|
||||
"source": "sysfs",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"nodev"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/sys/fs/cgroup",
|
||||
"type": "cgroup",
|
||||
"source": "cgroup",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"nodev",
|
||||
"relatime",
|
||||
"ro"
|
||||
]
|
||||
},
|
||||
{
|
||||
"type": "bind",
|
||||
"source": "/etc/kubernetes",
|
||||
"destination": "/etc/kubernetes",
|
||||
"options": [
|
||||
"rbind",
|
||||
"ro",
|
||||
"rprivate"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/etc/resolv.conf",
|
||||
"type": "bind",
|
||||
"source": "/etc/resolv.conf",
|
||||
"options": [
|
||||
"ro",
|
||||
"rbind",
|
||||
"rprivate"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/var/run/kubernetes",
|
||||
"type": "bind",
|
||||
"source": "/var/run/kubernetes",
|
||||
"options": [
|
||||
"rw",
|
||||
"rbind"
|
||||
]
|
||||
}
|
||||
],
|
||||
"linux": {
|
||||
"resources": {
|
||||
"devices": [
|
||||
{
|
||||
"allow": false,
|
||||
"access": "rwm"
|
||||
}
|
||||
]
|
||||
},
|
||||
"namespaces": [
|
||||
{
|
||||
"type": "pid"
|
||||
},
|
||||
{
|
||||
"type": "ipc"
|
||||
},
|
||||
{
|
||||
"type": "mount"
|
||||
}
|
||||
],
|
||||
"devices": null,
|
||||
"apparmorProfile": "",
|
||||
"selinuxProcessLabel": ""
|
||||
}
|
||||
}
|
||||
|
|
@ -3,6 +3,6 @@
|
|||
source /etc/kubernetes/apiserver
|
||||
source /etc/kubernetes/config
|
||||
|
||||
ARGS="$@ $KUBE_LOGTOSTDERR $KUBE_LOG_LEVEL $KUBE_ETCD_SERVERS $KUBE_API_ADDRESS $KUBE_API_PORT $KUBELET_PORT $KUBE_ALLOW_PRIV $KUBE_SERVICE_ADDRESSES $KUBE_ADMISSION_CONTROL $KUBE_API_ARGS"
|
||||
ARGS=$(echo "$@ $KUBE_LOGTOSTDERR $KUBE_LOG_LEVEL $KUBE_ETCD_SERVERS $KUBE_API_ADDRESS $KUBE_API_PORT $KUBELET_PORT $KUBE_ALLOW_PRIV $KUBE_SERVICE_ADDRESSES $KUBE_ADMISSION_CONTROL $KUBE_API_ARGS" | xargs -n1 | sort -u -t = -k 1,1 | xargs)
|
||||
|
||||
exec /usr/bin/kube-apiserver $ARGS
|
||||
|
|
|
|||
|
|
@ -1,12 +0,0 @@
|
|||
[Unit]
|
||||
Description=kubernetes-apiserver
|
||||
|
||||
[Service]
|
||||
ExecStart=$EXEC_START
|
||||
ExecStop=$EXEC_STOP
|
||||
Restart=on-failure
|
||||
WorkingDirectory=$DESTDIR
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
||||
|
|
@ -1 +0,0 @@
|
|||
d /var/run/kubernetes 0755 kube kube -
|
||||
Loading…
Add table
Add a link
Reference in a new issue