谁启动 kube-apiserver 以及如何配置其启动参数？

Question

kube-apiserver 是由 kubeadm init 创建的配置中的containerd.service启动的，如何检查containerd.service的配置以及它如何知道如何启动kube-apiserver？

\n\n

ytong@controller-4135505:~$ systemctl status containerd.service\n\xe2\x97\x8f containerd.service - containerd container runtime\n   Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled)\n   Active: active (running) since Tue 2020-06-09 04:34:04 GMT+7; 3min 24s ago\n     Docs: https://containerd.io\n  Process: 5135 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS)\n Main PID: 5138 (containerd)\n    Tasks: 228\n   CGroup: /system.slice/containerd.service\n           \xe2\x94\x9c\xe2\x94\x805138 /usr/bin/containerd\n           \xe2\x94\x9c\xe2\x94\x805821 etcd --advertise-client-urls=https://10.169.97.0:2379 --cert-file=/etc/kubernetes/pki/etcd/server.crt --client-cert-auth=true --data-dir=/var/lib/etcd --initial-advertise-\n           \xe2\x94\x9c\xe2\x94\x805847 kube-scheduler --authentication-kubeconfig=/etc/kubernetes/scheduler.conf --authorization-kubeconfig=/etc/kubernetes/scheduler.conf --bind-address=127.0.0.1 --kubeconfig=/\n         * \xe2\x94\x9c\xe2\x94\x805868 kube-apiserver --advertise-address=10.169.97.0 --allow-privileged=true --authorization-mode=Node,RBAC --client-ca-file=/etc/kubernetes/pki/ca.crt --enable-admission-plugin\n           \xe2\x94\x94\xe2\x94\x807587 kube-controller-manager --authentication-kubeconfig=/etc/kubernetes/controller-manager.conf --authorization-kubeconfig=/etc/kubernetes/controller-manager.conf --bind-addre```\nAnd it is not controlled by kubelet.service right since I restart kubelet.service will not restart kube-apiserver daemon.\n\nThe only configuration file found by me for containerd.service is for /lib/systemd/system/containerd.service, but it only tell the execStart is /usr/bin/containerd.\n\nThe /usr/bin/containerd is a binary and all clues are ended here for me to find how it can find kube-apiserver to start.\n\nOr does containerd has some path to hold its configuration files?\n

\n

Answer 1

Kube API Server 作为静态 pod从位于以下位置的 yaml启动/etc/kubernetes/manifests/kube-apiserver.yaml。您可以编辑 yaml 以添加或删除启动参数。Kubelet 知道在该路径中查找任何 yaml，如果有任何 yaml，kubelet 会将容器创建委托给 containerd。因此，containerd 并不直接了解 Kubernetes API Server 的任何信息。对于containerd来说，Kubernetes API服务器只是另一个要启动的容器。

https://kubernetes.io/docs/reference/setup-tools/kubeadm/implementation-details/#constants-and-well-known-values-and-paths