k8s所用的yaml文件和sh文件_yaml和sh文档-CSDN博客

本文链接：https://blog.csdn.net/ywmack/article/details/90044306

这篇博客包含了 Kubernetes 集群部署的关键文件，包括 down-master-images.sh 和 down-node-images.sh 脚本，以及 kube-flannel.yml、kubeadm-config.yaml、kubernetes-dashboard-rbac.yaml 和 kubernetes-dashboard.yaml 的 YAML 配置文件。这些文件对于搭建和管理 K8s 集群至关重要，博主进行了备份以便随时查阅。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

虽然在githup上面
但是在这里做一个备份

down-master-images.sh

#!/bin/bash
KUBE_VERSION=v1.12.1
KUBE_PAUSE_VERSION=3.1
ETCD_VERSION=3.2.24
DNS_VERSION=1.2.2
 
YWMACK_URL=ywmack/google-k8s
GCR_UR=k8s.gcr.io
 
images=(kube-apiserver:${KUBE_VERSION}
kube-controller-manager:${KUBE_VERSION}
kube-scheduler:${KUBE_VERSION}
kube-proxy:${KUBE_VERSION}
pause:${KUBE_PAUSE_VERSION}
etcd:${ETCD_VERSION}
coredns:${DNS_VERSION})
 
for imageName in ${images[@]} ; do
  docker pull $YWMACK_URL.$imageName
  docker tag $YWMACK_URL.$imageName $GCR_UR/$imageName
  docker rmi $YWMACK_URL.$imageName
done

down-node-images.sh

#!/bin/bash
KUBE_VERSION=v1.12.1
KUBE_PAUSE_VERSION=3.1
DASHBOARD_VERSION=v1.10.1

YWMACK_URL=ywmack/google-k8s
GCR_UR=k8s.gcr.io
 
images=(kube-proxy:${KUBE_VERSION}
pause:${KUBE_PAUSE_VERSION}
kubernetes-dashboard-amd64:${DASHBOARD_VERSION})

for imageName in ${images[@]} ; do
  docker pull $YWMACK_URL.$imageName
  docker tag $YWMACK_URL.$imageName $GCR_UR/$imageName
  docker rmi $YWMACK_URL.$imageName
done

kube-flannel.yml

---
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
  name: psp.flannel.unprivileged
  annotations:
    seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default
    seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default
    apparmor.security.beta.kubernetes.io/allowedProfileNames: runtime/default
    apparmor.security.beta.kubernetes.io/defaultProfileName: runtime/default
spec:
  privileged: false
  volumes:
    - configMap
    - secret
    - emptyDir
    - hostPath
  allowedHostPaths:
    - pathPrefix: "/etc/cni/net.d"
    - pathPrefix: "/etc/kube-flannel"
    - pathPrefix: "/run/flannel"
  readOnlyRootFilesystem: false
  # Users and groups
  runAsUser:
    rule: RunAsAny
  supplementalGroups:
    rule: RunAsAny
  fsGroup:
    rule: RunAsAny
  # Privilege Escalation
  allowPrivilegeEscalation: false
  defaultAllowPrivilegeEscalation: false
  # Capabilities
  allowedCapabilities: ['NET_ADMIN']
  defaultAddCapabilities: []
  requiredDropCapabilities: []
  # Host namespaces
  hostPID: false
  hostIPC: false
  hostNetwork: true
  hostPorts:
  - min: 0
    max: 65535
  # SELinux
  seLinux:
    # SELinux is unsed in CaaSP
    rule: 'RunAsAny'
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: flannel
rules:
  - apiGroups: ['extensions']
    resources: ['podsecuritypolicies']
    verbs: ['use']
    resourceNames: ['psp.flannel.unprivileged']
  - apiGroups:
      - ""
    resources:
      - pods
    verbs:
      - get
  - apiGroups:
      - ""
    resources:
      - nodes
    verbs:
      - list
      - watch
  - apiGroups:
      - ""
    resources:
      - nodes/status
    verbs:
      - patch
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: flannel
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: flannel
subjects:
- kind: ServiceAccount
  name: flannel
  namespace: kube-system
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: flannel
  namespace: kube-system
---
kind: ConfigMap
apiVersion: v1
metadata:
  name: kube-flannel-cfg
  namespace: kube-system
  labels:
    tier: node
    app: flannel
data:
  cni-conf.json: |
    {
      "name": "cbr0",
      "plugins": [
        {
          "type": "flannel",
          "delegate": {
            "hairpinMode": true,
            "isDefaultGateway": true
          }
        },
        {
          "type": "portmap",
          "capabilities": {
            "portMappings": true
          }
        }
      ]