mirror of
https://github.com/k3s-io/k3s.git
synced 2024-06-07 19:41:36 +00:00
73 lines
2.4 KiB
Go
73 lines
2.4 KiB
Go
/*
|
|
Copyright 2017 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
// Package options contains flags and options for initializing kube-apiserver
|
|
package options
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
|
|
utilnet "k8s.io/apimachinery/pkg/util/net"
|
|
genericoptions "k8s.io/apiserver/pkg/server/options"
|
|
)
|
|
|
|
// NewSecureServingOptions gives default values for the kube-apiserver which are not the options wanted by
|
|
// "normal" API servers running on the platform
|
|
func NewSecureServingOptions() *genericoptions.SecureServingOptionsWithLoopback {
|
|
o := genericoptions.SecureServingOptions{
|
|
BindAddress: net.ParseIP("0.0.0.0"),
|
|
BindPort: 6443,
|
|
Required: true,
|
|
ServerCert: genericoptions.GeneratableKeyCert{
|
|
PairName: "apiserver",
|
|
CertDirectory: "/var/run/kubernetes",
|
|
},
|
|
}
|
|
return o.WithLoopback()
|
|
}
|
|
|
|
// NewInsecureServingOptions gives default values for the kube-apiserver.
|
|
// TODO: switch insecure serving off by default
|
|
func NewInsecureServingOptions() *genericoptions.DeprecatedInsecureServingOptionsWithLoopback {
|
|
o := genericoptions.DeprecatedInsecureServingOptions{
|
|
BindAddress: net.ParseIP("127.0.0.1"),
|
|
BindPort: 8080,
|
|
}
|
|
return o.WithLoopback()
|
|
}
|
|
|
|
// DefaultAdvertiseAddress sets the field AdvertiseAddress if
|
|
// unset. The field will be set based on the SecureServingOptions. If
|
|
// the SecureServingOptions is not present, DefaultExternalAddress
|
|
// will fall back to the insecure ServingOptions.
|
|
func DefaultAdvertiseAddress(s *genericoptions.ServerRunOptions, insecure *genericoptions.DeprecatedInsecureServingOptions) error {
|
|
if insecure == nil {
|
|
return nil
|
|
}
|
|
|
|
if s.AdvertiseAddress == nil || s.AdvertiseAddress.IsUnspecified() {
|
|
hostIP, err := utilnet.ResolveBindAddress(insecure.BindAddress)
|
|
if err != nil {
|
|
return fmt.Errorf("unable to find suitable network address.error='%v'. "+
|
|
"Try to set the AdvertiseAddress directly or provide a valid BindAddress to fix this", err)
|
|
}
|
|
s.AdvertiseAddress = hostIP
|
|
}
|
|
|
|
return nil
|
|
}
|