I'm fixing pentest issues on a k8s bare metal infrastructure, deployed with ansible playbooks.
I've found that most of the modification to be done lay on the /etc/kubernetes/manifests/kube-apiserver.yaml file on the k8s master node.
I'm not really use to kubespray deep dived into the and wasn't able to identify where the API Server specification file is pulled from.
I aim to accurately modify ansible playbooks in order to automate changes. Can one here guide through with it please?
Kubespray supports kubeadm for cluster creation since v2.3.
kubeadm uses /etc/kuberntes/manifests as the path where kubelet should look for stating pod manifests. If you change anything in the files containing on that directory then kubelet detect the changes and deploy the change.
To learn more click here