draft: kubeadm を使ったクラスタ構築

aqua.yaml

@@ -9,19 +9,6 @@
 #   - all
 registries:
 - type: standard
-  ref: v4.308.0 # renovate: depName=aquaproj/aqua-registry
+  ref: v4.389.0 # renovate: depName=aquaproj/aqua-registry
 packages:
-  - name: koalaman/[email protected]
-  - name: derailed/[email protected]
-  - name: kubernetes/[email protected]
-  - name: ahmetb/[email protected]
-  - name: argoproj/[email protected]
-  - name: kubernetes-sigs/kustomize@kustomize/v5.6.0
-  - name: helm/[email protected]
-  - name: kubernetes/[email protected]
-  - name: mvdan/[email protected]
-  - name: kubernetes/[email protected]
-  - name: k0sproject/[email protected]
-  - name: kubernetes-sigs/[email protected]
-  - name: cloudflare/[email protected]
-  - name: getsops/[email protected]
+- name: kubernetes/kubernetes/[email protected]

kubeadm-config.yaml

@@ -0,0 +1,48 @@
+apiVersion: kubeadm.k8s.io/v1beta4
+kind: InitConfiguration
+localAPIEndpoint:
+  advertiseAddress: 10.10.20.1
+  bindPort: 6443
+nodeRegistration:
+  criSocket: unix:///run/containerd/containerd.sock
+  imagePullPolicy: IfNotPresent
+  imagePullSerial: true
+  name: hanpen
+  taints: null
+bootstrapTokens:
+- groups:
+  - system:bootstrappers:kubeadm:default-node-token
+  token: abcdef.0123456789abcdef
+  ttl: 24h0m0s
+  usages:
+  - signing
+  - authentication
+timeouts:
+  controlPlaneComponentHealthCheck: 4m0s
+  discovery: 5m0s
+  etcdAPICall: 2m0s
+  kubeletHealthCheck: 4m0s
+  kubernetesAPICall: 1m0s
+  tlsBootstrap: 5m0s
+  upgradeManifests: 5m0s
+---
+apiVersion: kubeadm.k8s.io/v1beta4
+kind: ClusterConfiguration
+apiServer: {}
+caCertificateValidityPeriod: 87600h0m0s
+certificateValidityPeriod: 8760h0m0s
+certificatesDir: /etc/kubernetes/pki
+clusterName: cointreau
+controllerManager: {}
+dns: {}
+encryptionAlgorithm: RSA-2048
+etcd:
+  local:
+    dataDir: /var/lib/etcd
+imageRepository: registry.k8s.io
+kubernetesVersion: 1.33.0
+networking:
+  dnsDomain: cluster.local
+  serviceSubnet: 10.96.0.0/12
+proxy: {}
+scheduler: {}

kubeadm-join-config.yaml

@@ -0,0 +1,23 @@
+apiVersion: kubeadm.k8s.io/v1beta4
+caCertPath: /etc/kubernetes/pki/ca.crt
+discovery:
+  bootstrapToken:
+    apiServerEndpoint: kube-apiserver:6443
+    token: abcdef.0123456789abcdef
+    unsafeSkipCAVerification: true
+  tlsBootstrapToken: abcdef.0123456789abcdef
+kind: JoinConfiguration
+nodeRegistration:
+  criSocket: unix:///var/run/containerd/containerd.sock
+  imagePullPolicy: IfNotPresent
+  imagePullSerial: true
+  name: huku-thinkpad
+  taints: null
+timeouts:
+  controlPlaneComponentHealthCheck: 4m0s
+  discovery: 5m0s
+  etcdAPICall: 2m0s
+  kubeletHealthCheck: 4m0s
+  kubernetesAPICall: 1m0s
+  tlsBootstrap: 5m0s
+  upgradeManifests: 5m0s