A-7--从harbor部署到在k8s中使用

喜欢ヅ旅行 2022-10-28 07:59 154阅读 0赞

![c4c110d77532d977f5e6a39d582d832a.png][]

![d5d9be9563cbb78194ee5a1c389250eb.png][]

![7978e50c8ba4bff875603cf0768a92e3.png][]

![3f2363e7bde7c59b7f0c7c33ed50f402.png][]

![f5056e6ea403386b595b613e60f88509.png][]

![6dc01b817e2388c2e719822751e26022.png][]

![25dcf31437674e0d3d458a45f8fc7e08.png][]

![03f7148ab2c9f9f4d7d47c525bb5d837.png][]

四、在k8s中使用harbor仓库  
修改每个node上的docker认证仓库

将每个node节点上的docker同样需要配置可信任仓库

vi /etc/docker/daemon.json

\#修改为  
\{"registry-mirrors": \["http://a58c8480.m.daocloud.io"\],  
"insecure-registries": \["10.1.210.33"\]\} (harbor地址)

\#重启docker  
systemctl restart docker

复制代码  
创建认证secret  
　　由于harbor采用了用户名密码认证，所以在镜像下载时需要配置sercet

\#创建  
kubectl create secret docker-registry registry-secret --namespace=default \\  
\--docker-server=10.1.210.33 \\  
\--docker-username=admin \\  
\--docker-password=Harbor12345

\#查看secret  
\[root@master demo\]\# kubectl get secret  
NAME TYPE DATA AGE  
default-token-gdwgn kubernetes.io/service-account-token 3 2d18h  
registry-secret kubernetes.io/dockerconfigjson 1 116s

\#删除  
kubectl delete secret registry-secret

以一个部署一个nginx为例子,其中需要把containers中的images镜像指定为harbor仓库镜像地址，并且使用创建的的secret。

\# kubectl create -f nginx.yml

apiVersion: apps/v1  
kind: Deployment  
metadata:  
name: nginx-deployment  
labels:  
appname: nginx  
spec:  
replicas: 3  
selector:  
matchLabels:  
appname: nginx  
template:  
metadata:  
labels:  
appname: nginx  
spec:  
containers:  
\- name: nginx  
image: 10.1.210.33/project1/nginx:latest \#镜像地址  
ports:  
\- containerPort: 80  
imagePullSecrets: \#使用的secret  
\- name: registry-secret

![4971dcf1cceffab6d776ee5904020f7a.png][]

[c4c110d77532d977f5e6a39d582d832a.png]: /images/20221024/ae14103803e24a6ebd4ffa62263d8f97.png
[d5d9be9563cbb78194ee5a1c389250eb.png]: /images/20221024/30c03ca8a7834e3c99705814bd89fd22.png
[7978e50c8ba4bff875603cf0768a92e3.png]: /images/20221024/57311a5b710445829c563894bd73bb23.png
[3f2363e7bde7c59b7f0c7c33ed50f402.png]: /images/20221024/b1f4c363c0df4d63a0ab08a7aff32c89.png
[f5056e6ea403386b595b613e60f88509.png]: /images/20221024/33eb8235a8d745cb939502a5d7736af1.png
[6dc01b817e2388c2e719822751e26022.png]: /images/20221024/859d21371c3f4688a839b7fcec985250.png
[25dcf31437674e0d3d458a45f8fc7e08.png]: /images/20221024/d9e14fb5810645c5b56f45020712e70a.png
[03f7148ab2c9f9f4d7d47c525bb5d837.png]: /images/20221024/7c355ed64dfc4ade815448183ebb3596.png
[4971dcf1cceffab6d776ee5904020f7a.png]: /images/20221024/7f962a4c352a4a6ca584850cfde8584d.png