From bd935c4b99d41c977e1e7bdfd6ae24832f0f42db Mon Sep 17 00:00:00 2001 From: fanux Date: Mon, 29 Jul 2019 15:12:34 +0800 Subject: [PATCH] fix config overwrite bug --- README.md | 44 ++++++++++++++++++++++++++++++++++++++++++++ docs/upgrade_zh.md | 2 +- 2 files changed, 45 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 310186903..c7ee728b3 100644 --- a/README.md +++ b/README.md @@ -122,6 +122,50 @@ kubeadm join 10.103.97.2:6443 --token 9vr73a.a8uxyaju799qwdjv \ --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866 ``` +## Using config file +For example, we need add a certSANs `sealyun.com`: +``` +sealos config -t kubeadm >> kubeadm-config.yaml.tmpl +``` +See the config template file `cat kubeadm-config.yaml.tmpl`, edit it add `sealyun.com`: +``` +apiVersion: kubeadm.k8s.io/v1beta1 +kind: ClusterConfiguration +kubernetesVersion: {{.Version}} +controlPlaneEndpoint: "apiserver.cluster.local:6443" +networking: + podSubnet: 100.64.0.0/10 +apiServer: + certSANs: + - sealyun.com # this is what I added + - 127.0.0.1 + - apiserver.cluster.local + {{range .Masters -}} + - {{.}} + {{end -}} + - {{.VIP}} +--- +apiVersion: kubeproxy.config.k8s.io/v1alpha1 +kind: KubeProxyConfiguration +mode: "ipvs" +ipvs: + excludeCIDRs: + - "{{.VIP}}/32" +``` + +Then using --kubeadm-config flag: +``` +sealos init --kubeadm-config kubeadm-config.yaml.tmpl \ + --master 192.168.0.2 \ + --master 192.168.0.3 \ + --master 192.168.0.4 \ + --node 192.168.0.5 \ + --user root \ + --passwd your-server-password \ + --version v1.14.1 \ + --pkg-url /root/kube1.14.1.tar.gz +``` + ## upgrade [升级简体中文](docs/upgrade_zh.md) diff --git a/docs/upgrade_zh.md b/docs/upgrade_zh.md index 694ccc8ee..7c0d0a2c3 100644 --- a/docs/upgrade_zh.md +++ b/docs/upgrade_zh.md @@ -37,7 +37,7 @@ kubectl drain $NODE --ignore-daemonsets ``` 更新kubelet配置: ``` -kubeadm upgrade node config --kubelet-version v1.14.x +kubeadm upgrade node config --kubelet-version v1.15.0 ``` 然后升级kubelet 一样是替换二进制再重启 kubelet service ```