kube-apiserver
–advertise-address=172.20.0.2
–allow-privileged=true
–authorization-mode=Node,RBAC
–client-ca-file=/etc/kubernetes/pki/ca.crt
–enable-admission-plugins=NodeRestriction
–enable-bootstrap-token-auth=true
–etcd-cafile=/etc/kubernetes/pki/etcd/ca.crt –etcd-certfile=/etc/kubernetes/pki/apiserver-etcd-client.crt
–etcd-keyfile=/etc/kubernetes/pki/apiserver-etcd-client.key –etcd-servers=https://127.0.0.1:2379
–kubelet-client-certificate=/etc/kubernetes/pki/apiserver-kubelet-client.crt
–kubelet-client-key=/etc/kubernetes/pki/apiserver-kubelet-client.key
–kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
–proxy-client-cert-file=/etc/kubernetes/pki/front-proxy-client.crt –proxy-client-key-file=/etc/kubernetes/pki/front-proxy-client.key
–requestheader-allowed-names=front-proxy-client
–requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt
–requestheader-extra-headers-prefix=X-Remote-Extra-
–requestheader-group-headers=X-Remote-Group
–requestheader-username-headers=X-Remote-User
–runtime-config=
–secure-port=6443
–service-account-issuer=https://kubernetes.default.svc.cluster.local
–service-account-key-file=/etc/kubernetes/pki/sa.pub –service-account-signing-key-file=/etc/kubernetes/pki/sa.key
–service-cluster-ip-range=10.96.0.0/16
–tls-cert-file=/etc/kubernetes/pki/apiserver.crt –tls-private-key-file=/etc/kubernetes/pki/apiserver.key

kube-controller-manager
–allocate-node-cidrs=true
–authentication-kubeconfig=/etc/kubernetes/controller-manager.conf
–authorization-kubeconfig=/etc/kubernetes/controller-manager.conf
–bind-address=127.0.0.1
–client-ca-file=/etc/kubernetes/pki/ca.crt
–cluster-cidr=10.244.0.0/16
–cluster-name=kind
–cluster-signing-cert-file=/etc/kubernetes/pki/ca.crt –cluster-signing-key-file=/etc/kubernetes/pki/ca.key
–controllers=*,bootstrapsigner,tokencleaner
–enable-hostpath-provisioner=true
–kubeconfig=/etc/kubernetes/controller-manager.conf
–leader-elect=true
–requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt
–root-ca-file=/etc/kubernetes/pki/ca.crt
–service-account-private-key-file=/etc/kubernetes/pki/sa.key
–service-cluster-ip-range=10.96.0.0/16
–use-service-account-credentials=true

kube-scheduler
–authentication-kubeconfig=/etc/kubernetes/scheduler.conf –authorization-kubeconfig=/etc/kubernetes/scheduler.conf
–bind-address=127.0.0.1
–kubeconfig=/etc/kubernetes/scheduler.conf
–leader-elect=true

etcd
–advertise-client-urls=https://172.20.0.2:2379
–cert-file=/etc/kubernetes/pki/etcd/server.crt
–client-cert-auth=true
–data-dir=/var/lib/etcd
–experimental-initial-corrupt-check

/usr/bin/kubelet
–bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf
–kubeconfig=/etc/kubernetes/kubelet.conf
–config=/var/lib/kubelet/config.yaml
–container-runtime-endpoin

/usr/local/bin/kube-proxy
–config=/var/lib/kube-proxy/config.conf
–hostname-override=kind-control-plane