forked from rootless-containers/usernetes
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathdocker-compose.yml
97 lines (96 loc) · 2.56 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
version: "3"
services:
init-certs:
image: ghcr.io/rootless-containers/usernetes
entrypoint: /docker-entrypoint.sh
command:
- unsudo
- /home/user/usernetes/common/cfssl.sh
- --dir=/home/user/.config/usernetes
- --master=master
- --node=node-crio
- --node=node-containerd
privileged: true
tty: true
hostname: master
volumes:
- tls-master:/home/user/.config/usernetes/master
- tls-node-crio:/home/user/.config/usernetes/nodes.node-crio
- tls-node-containerd:/home/user/.config/usernetes/nodes.node-containerd
master:
image: ghcr.io/rootless-containers/usernetes
command:
- --wait-init-certs
- --start=u7s-master-with-etcd.target
- --cidr=10.0.100.0/24
# 2379/tcp: etcd, 6443/tcp: kube-apiserver
- --publish=0.0.0.0:2379:2379/tcp
- --publish=0.0.0.0:6443:6443/tcp
- --cni=flannel
- --cri=
privileged: true
tty: true
ports:
- 127.0.0.1:6443:6443
hostname: master
networks:
- usernetes
volumes:
- tls-master:/home/user/.config/usernetes/master
node-crio:
image: ghcr.io/rootless-containers/usernetes
command:
- --wait-init-certs
- --start=u7s-node.target
- --cidr=10.0.101.0/24
# 10250/tcp: kubelet, 8472/udp: flannel
- --publish=0.0.0.0:10250:10250/tcp
- --publish=0.0.0.0:8472:8472/udp
- --cni=flannel
- --cri=crio
privileged: true
tty: true
networks:
- usernetes
hostname: node-crio
volumes:
- tls-node-crio:/home/user/.config/usernetes/node
# FIXME: flanneld should not require tls-master
# (currently required because master and flanneld share the same etcd cluster)
- tls-master:/home/user/.config/usernetes/master
node-containerd:
image: ghcr.io/rootless-containers/usernetes
command:
- --wait-init-certs
- --start=u7s-node.target
- --cidr=10.0.102.0/24
- --publish=0.0.0.0:10250:10250/tcp
- --publish=0.0.0.0:8472:8472/udp
- --cni=flannel
- --cri=containerd
privileged: true
tty: true
networks:
- usernetes
hostname: node-containerd
volumes:
- tls-node-containerd:/home/user/.config/usernetes/node
- tls-master:/home/user/.config/usernetes/master
networks:
usernetes:
volumes:
tls-master:
driver_opts:
type: tmpfs
device: tmpfs
o: "uid=1000"
tls-node-crio:
driver_opts:
type: tmpfs
device: tmpfs
o: "uid=1000"
tls-node-containerd:
driver_opts:
type: tmpfs
device: tmpfs
o: "uid=1000"