tls k8s debug(26)

0。0。0 --secure-port=6443 --tls-cert-file=/var/run/kubernetes/serving-kube-apiserver。crt --tls-private-key-file=/var/run/kubernetes/serving-kube-apiserver。key --tls-ca-file=/var/run/kubernetes/server-ca。crt --insecure-bind-address=127。0。0。1 --insecure-port=8080 --storage-backend=etcd3 --etcd-servers=http://127。0。0。1:2379 --service-cluster-ip-range=10。0。0。0/24 --feature-gates=AllAlpha=false --external-hostname=localhost --requestheader-username-headers=X-Remote-User --requestheader-group-headers=X-Remote-Group --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-client-ca-file=/var/run/kubernetes/request-header-ca。

crt --requestheader-allowed-names=system:auth-proxy --proxy-client-cert-file=/var/run/kubernetes/client-auth-proxy。crt --proxy-client-key-file=/var/run/kubernetes/client-auth-proxy。key --cors-allowed-origins=/127。0。0。1(:[0-9]+)?$,/localhost(:[0-9]+)?$

root13648 13642 99 Jan13 pts/1 80-21:17:41 /home/ubuntu/kubernetes/_output/local/bin/linux/amd64/hyperkube apiserver --authorization-mode=Node,RBAC --runtime-config=admissionregistration。k8s。io/v1alpha1,settings。k8s。io/v1alpha1 --cloud-provider= --cloud-config= --v=3 --vmodule= --cert-dir=/var/run/kubernetes --client-ca-file=/var/run/kubernetes/client-ca。crt --service-account-key-file=/tmp/kube-serviceaccount。key --service-account-lookup=true --admission-control=Initializers,NamespaceLifecycle,LimitRanger,ServiceAccount,SecurityContextDeny,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,PodPreset --admission-control-config-file= --bind-address=0。

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-82083-26.html