github.com/technosophos/deis@v1.7.1-0.20150915173815-f9005256004b/deisctl/units/deis-kube-apiserver.service (about) 1 [Unit] 2 Description=Kubernetes API Server 3 Documentation=https://github.com/GoogleCloudPlatform/kubernetes 4 Requires=fleet.service docker.service flanneld.service 5 After=fleet.service docker.service flanneld.service 6 7 [Service] 8 EnvironmentFile=/etc/environment 9 ExecStartPre=-/bin/sh -c "etcdctl get /deis/scheduler/k8s/master >/dev/null 2>&1 || etcdctl mk /deis/scheduler/k8s/master" 10 ExecStartPre=/bin/sh -c "etcdctl set /deis/scheduler/k8s/master $COREOS_PRIVATE_IPV4" 11 ExecStartPre=/bin/bash -c "/opt/bin/download-k8s-binary kube-apiserver" 12 ExecStartPre=/bin/bash -c "if etcdctl get /kube-serviceaccount >/dev/null 2>&1; then etcdctl get /kube-serviceaccount > /opt/bin/kube-serviceaccount.key; else /bin/openssl genrsa -out /opt/bin/kube-serviceaccount.key 2048 2>/dev/null; etcdctl set /kube-serviceaccount < /opt/bin/kube-serviceaccount.key; fi" 13 ExecStart=/bin/bash -c "/opt/bin/kube-apiserver \ 14 --service_account_key_file=/opt/bin/kube-serviceaccount.key \ 15 --service_account_lookup=false \ 16 --admission_control=NamespaceLifecycle,NamespaceAutoProvision,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota \ 17 --allow_privileged=true \ 18 --insecure_bind_address=0.0.0.0 \ 19 --insecure_port=8080 \ 20 --kubelet_https=true \ 21 --secure_port=6443 \ 22 --service-cluster-ip-range=10.100.0.0/16 \ 23 --etcd_servers=$(curl -s 127.0.0.1:4001/v2/machines | sed 's/ //g') \ 24 --public_address_override=${COREOS_PRIVATE_IPV4} \ 25 --logtostderr=true \ 26 --runtime_config=api/v1" 27 ExecStartPost=/bin/bash -c "fleetctl stop deis-kube-scheduler deis-kube-controller-manager deis-kube-kubelet deis-kube-proxy; sleep 2; fleetctl start deis-kube-scheduler deis-kube-controller-manager deis-kube-kubelet deis-kube-proxy" 28 Restart=always 29 RestartSec=10 30 SuccessExitStatus=2 31 32 [Install] 33 WantedBy=multi-user.target