{
    "group": "isulad",
    "default-runtime": "lcr",
    "graph": "/var/lib/isulad",
    "state": "/var/run/isulad",
    "engine": "lcr",
    "log-level": "ERROR",
    "pidfile": "/var/run/isulad.pid",
    "log-opts": {
        "log-file-mode": "0600",
        "log-path": "/var/lib/isulad",
        "max-file": "1",
        "max-size": "30KB"
    },
    "log-driver": "stdout",
    "hook-spec": "/etc/default/isulad/hooks/default.json",
    "start-timeout": "2m",
    "storage-driver": "overlay2",
    "storage-opts": [
        "overlay2.override_kernel_check=true"
    ],
    "registry-mirrors": [     # 配置镜像仓库地址
        "https://72idtxd8.mirror.aliyuncs.com",
        "https://reg-mirror.qiniu.com",
        "http://hub-mirror.c.163.com"
    ],
    "insecure-registries": [    # 不使用 TLS 校验的镜像仓库
        "192.168.1.153:5000"  
    ],
    "pod-sandbox-image": "192.168.1.153:5000/kubesphere/pause:3.1", # pod 默认使用镜像
    "native.umask": "secure",
    "network-plugin": "cni",  # 指定网络插件为 cni
    "cni-bin-dir": "",
    "cni-conf-dir": "",
    "image-layer-check": false,
    "use-decrypted-key": true,
    "insecure-skip-verify-enforce": false,
    "hosts" : [       # 指定通信方式
        "unix:///var/run/isulad.sock"
    ]
}

apiVersion: kubeadm.k8s.io/v1beta2
bootstrapTokens:
- groups:
  - system:bootstrappers:kubeadm:default-node-token
  token: abcdef.0123456789abcdef
  ttl: 24h0m0s
  usages:
  - signing
  - authentication
kind: InitConfiguration
localAPIEndpoint:
  advertiseAddress: 192.168.1.153   # 修改为本机IP
  bindPort: 6443
nodeRegistration:
  criSocket: /var/run/isulad.sock   # 修改容器引擎为isulad
  name: master  # 修改为本机的主机名
  taints:
  - effect: NoSchedule
    key: node-role.kubernetes.io/master
---
apiServer:
  timeoutForControlPlane: 4m0s
apiVersion: kubeadm.k8s.io/v1beta2
certificatesDir: /etc/kubernetes/pki
clusterName: cluster.local  # 修改k8s集群的名字
controlPlaneEndpoint: lb.kubesphere.local   # 修改可以映射到 IP 地址的 DNS 名称
controllerManager: {}
dns:
  type: CoreDNS
etcd:
  local:
    dataDir: /var/lib/etcd
imageRepository: registry.cn-hangzhou.aliyuncs.com/google_containers    # 使用国内镜像仓库
kind: ClusterConfiguration
kubernetesVersion: v1.17.9  # 修改k8s版本号
networking:
  dnsDomain: cluster.local
  serviceSubnet: 10.233.0.0/18
  podSubnet: 10.233.64.0/18
scheduler: {}

# Note: This dropin only works with kubeadm and kubelet v1.11+
[Service]
Environment="KUBELET_KUBECONFIG_ARGS=--bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf --cgroup-driver=cgroupfs --network-plugin=cni --pod-infra-container-image=192.168.1.153:5000/kubesphere/pause:3.1 --node-ip=192.168.1.153 --hostname-override=master"
Environment="KUBELET_CONFIG_ARGS=--config=/var/lib/kubelet/config.yaml"
# This is a file that "kubeadm init" and "kubeadm join" generates at runtime, populating the KUBELET_KUBEADM_ARGS variable dynamically
EnvironmentFile=-/var/lib/kubelet/kubeadm-flags.env
# This is a file that the user can use for overrides of the kubelet args as a last resort. Preferably, the user should use
# the .NodeRegistration.KubeletExtraArgs object in the configuration files instead. KUBELET_EXTRA_ARGS should be sourced from this file.
EnvironmentFile=-/etc/sysconfig/kubelet
ExecStart=
ExecStart=/usr/bin/kubelet $KUBELET_KUBECONFIG_ARGS $KUBELET_CONFIG_ARGS $KUBELET_KUBEADM_ARGS $KUBELET_EXTRA_ARGS

# For eBPF mode, we need to be able to mount the BPF filesystem at /sys/fs/bpf so we mount in the parent directory.
- name: sysfs
  mountPath: /sys/fs/
  # Bidirectional means that, if we mount the BPF filesystem at /sys/fs/bpf it will propagate to the host.
  # If the host is known to mount that filesystem already then Bidirectional can be omitted.
  mountPropagation: Bidirectional