Konnectivity सेटअप

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: konnectivity-agent
  namespace: kube-system
spec:
  selector:
    matchLabels:
      app: konnectivity-agent
  template:
    metadata:
      labels:
        app: konnectivity-agent
    spec:
      containers:
      - name: konnectivity-agent
        image: k8s.gcr.io/konnectivity-agent:v0.0.30
        args:
        - --agent-id=$(NODE_NAME)
        - --ca-cert=/etc/kubernetes/pki/ca.crt
        - --client-cert=/etc/kubernetes/pki/konnectivity-agent.crt
        - --client-key=/etc/kubernetes/pki/konnectivity-agent.key
        - --proxy-server-addr=127.0.0.1:8132
        env:
        - name: NODE_NAME
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
        volumeMounts:
        - name: k8s-certs
          mountPath: /etc/kubernetes/pki
          readOnly: true
      volumes:
      - name: k8s-certs
        hostPath:
          path: /etc/kubernetes/pki

apiVersion: apps/v1
kind: Deployment
metadata:
  name: konnectivity-server
  namespace: kube-system
spec:
  replicas: 1
  selector:
    matchLabels:
      app: konnectivity-server
  template:
    metadata:
      labels:
        app: konnectivity-server
    spec:
      containers:
      - name: konnectivity-server
        image: k8s.gcr.io/konnectivity-server:v0.0.30
        args:
        - --server-port=8132
        - --server-cert=/etc/kubernetes/pki/konnectivity-server.crt
        - --server-key=/etc/kubernetes/pki/konnectivity-server.key
        - --ca-cert=/etc/kubernetes/pki/ca.crt
        volumeMounts:
        - name: k8s-certs
          mountPath: /etc/kubernetes/pki
          readOnly: true
      volumes:
      - name: k8s-certs
        hostPath:
          path: /etc/kubernetes/pki

# Konnectivity सर्वर प्रमाणपत्र
kubectl create secret tls konnectivity-server-tls \
  --cert=/etc/kubernetes/pki/konnectivity-server.crt \
  --key=/etc/kubernetes/pki/konnectivity-server.key \
  -n kube-system

# Konnectivity एजेंट प्रमाणपत्र
kubectl create secret tls konnectivity-agent-tls \
  --cert=/etc/kubernetes/pki/konnectivity-agent.crt \
  --key=/etc/kubernetes/pki/konnectivity-agent.key \
  -n kube-system