k8s

k8s Ingress配置 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 apiVersion: extensions/v1beta1 kind: Ingress metadata: name: apptest-ingress-service annotations: kubernetes.io/ingress.class: nginx nginx.ingress.kubernetes.io/rewrite-target: /$1 nginx.ingress.kubernetes.io/server-snippet: | location ~* "^.*actuator.*$" { deny all; return 403; } spec: rules: - http: paths: - path: /?(.*) backend: serviceName: apptest-fe-cluster-ip servicePort: 3000 - path: /api(?=\/|\#|\?|$)/?(.*) backend: serviceName: apptest-cluster-ip servicePort: 8080 使用nginx....

Gitlab Runner 使用私有Harbor仓库中的镜像 遇到的问题: gitlabCI K8s Runner 中, 无法从私有仓库下载私有镜像. 创建secret 1 2 3 4 5 kubectl create secret docker-registry harbor-redstarclouds-secret \ --namespace redstarclouds-ci \ --docker-server=https://harbor.redstarclouds.com \ --docker-username="harbor$ci" \ --docker-password="xxxxxxx" 配置gitlab Runner 1 2 3 4 5 6 7 8 9 10 11 12 13 14 gitlabUrl: http://xxxxx:xxx runnerRegistrationToken: xxxxx rbac: create: true runners: imagePullSecrets: ["harbor-redstarclouds-secret"] privileged: true config: | [[runners]] name = "arch-k8s-runner" executor = "kubernetes" [runners.kubernetes] allowed_pull_policies = ["always", "if-not-present"] 报错如下 问题复现 创建Harbor机器人账户,创建后,Harbor会自动添加前缀 ‘harbor$’ 例如: 新建账户名称为ci,则最后使用账户名称为harbor$ci 创建k8s secret 1 2 3 4 5 kubectl create secret docker-registry harbor-redstarclouds-secret \ --namespace redstarclouds-ci \ --docker-server=https://harbor....

一. 部署 在一台CentOS上, 从零开始安装Harbor. 需要: Docker Docker-Compose Docker 安装 1. 配置YUM源 使用阿里云的源 1 2 yum install wget -y wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo 2. 安装最新版本Docker 1 yum install docker-ce docker-ce-cli -y 3. 修改Docker 配置文件 1 2 3 4 5 6 7 8 9 10 11 12 mkdir /etc/docker/ cat > /etc/docker/daemon.json << EOF { "registry-mirrors": ["https://gqs7xcfd.mirror.aliyuncs.com","https://hub-mirror.c.163.com"], "exec-opts": ["native.cgroupdriver=systemd"], "log-driver": "json-file", "log-opts": { "max-size": "100m" }, "storage-driver": "overlay2" } EOF 4. 启动Docker 服务 1 systemctl daemon-reload && systemctl enable docker && systemctl start docker 5....