161 lines
4.0 KiB
Markdown
161 lines
4.0 KiB
Markdown
<h1><center>Containerd之Kubernetes链接Harbor</center></h1>
|
||
|
||
作者：行癫（盗版必究）
|
||
|
||
------
|
||
|
||
## 一：环境基础
|
||
|
||
#### 1.Harbor正常运行
|
||
|
||
#### 2.Kubernetes集群正常
|
||
|
||
注意：kubernetes集群环境1.27.3版本（containerd）
|
||
|
||
## 二：配置Containerd
|
||
|
||
Kubernetes中Containerd连接Harbor仓库，Harbor仓库支持http和https部署，Containerd支持http和https连接，默认https
|
||
|
||
#### 1.配置Containerd
|
||
|
||
修改Kubernetes集群中所有节点的Containerd配置，配置如下：
|
||
|
||
```shell
|
||
[root@xingdiancloud ~]# vim /etc/containerd/config.toml
|
||
[plugins."io.containerd.grpc.v1.cri".registry]
|
||
config_path = "/etc/containerd/certs.d"
|
||
[plugins."io.containerd.grpc.v1.cri".registry.configs]
|
||
[plugins."io.containerd.grpc.v1.cri".registry.configs."10.9.12.201".auth]
|
||
username = "admin"
|
||
password = "Harbor12345"
|
||
[plugins."io.containerd.grpc.v1.cri".registry.configs."192.168.1.238:180".auth]
|
||
username = "admin"
|
||
password = "Harbor12345"
|
||
```
|
||
|
||
注意：
|
||
|
||
找到配置文件中对应的参数位置；将系统中多余的跟上面配置中相同的参数删除
|
||
|
||
```shell
|
||
[root@xingdiancloud ~]# mkdir /etc/containerd/certs.d/10.9.12.201 -p
|
||
[root@xingdiancloud ~]# cd /etc/containerd/certs.d/10.9.12.201
|
||
[root@xingdiancloud ~]# cat > hosts.toml << EOF
|
||
server = "http://10.9.12.201"
|
||
|
||
[host."http://10.9.12.201"]
|
||
capabilities = ["pull", "resolve", "push"]
|
||
skip_verify = true
|
||
EOF
|
||
```
|
||
|
||
#### 2.重新启动Containerd
|
||
|
||
```shell
|
||
[root@xingdiancloud ~]# systemctl restart containerd
|
||
```
|
||
|
||
## 三：集群测试
|
||
|
||
#### 1.创建Deployment
|
||
|
||
```yaml
|
||
---
|
||
apiVersion: apps/v1
|
||
kind: Deployment
|
||
metadata:
|
||
annotations: {}
|
||
labels:
|
||
k8s.kuboard.cn/name: test
|
||
name: test
|
||
namespace: default
|
||
resourceVersion: '397590'
|
||
spec:
|
||
progressDeadlineSeconds: 600
|
||
replicas: 1
|
||
revisionHistoryLimit: 10
|
||
selector:
|
||
matchLabels:
|
||
k8s.kuboard.cn/name: test
|
||
strategy:
|
||
rollingUpdate:
|
||
maxSurge: 25%
|
||
maxUnavailable: 25%
|
||
type: RollingUpdate
|
||
template:
|
||
metadata:
|
||
creationTimestamp: null
|
||
labels:
|
||
k8s.kuboard.cn/name: test
|
||
spec:
|
||
containers:
|
||
- image: 10.9.12.201/xingdian/nginx:v1
|
||
imagePullPolicy: IfNotPresent
|
||
name: nginx
|
||
ports:
|
||
- containerPort: 80
|
||
name: http
|
||
protocol: TCP
|
||
resources: {}
|
||
terminationMessagePath: /dev/termination-log
|
||
terminationMessagePolicy: File
|
||
volumeMounts:
|
||
- mountPath: /usr/share/nginx/html
|
||
name: volume-j2ijw
|
||
dnsPolicy: ClusterFirst
|
||
restartPolicy: Always
|
||
schedulerName: default-scheduler
|
||
securityContext: {}
|
||
terminationGracePeriodSeconds: 30
|
||
volumes:
|
||
- name: volume-j2ijw
|
||
nfs:
|
||
path: /opt/xingdiancloud_1
|
||
server: 10.9.12.250
|
||
|
||
---
|
||
apiVersion: v1
|
||
kind: Service
|
||
metadata:
|
||
annotations: {}
|
||
labels:
|
||
k8s.kuboard.cn/name: test
|
||
name: test
|
||
namespace: default
|
||
resourceVersion: '397893'
|
||
spec:
|
||
clusterIP: 10.99.28.173
|
||
clusterIPs:
|
||
- 10.99.28.173
|
||
externalTrafficPolicy: Cluster
|
||
internalTrafficPolicy: Cluster
|
||
ipFamilies:
|
||
- IPv4
|
||
ipFamilyPolicy: SingleStack
|
||
ports:
|
||
- name: xbcbcp
|
||
nodePort: 30009
|
||
port: 80
|
||
protocol: TCP
|
||
targetPort: 80
|
||
selector:
|
||
k8s.kuboard.cn/name: test
|
||
sessionAffinity: None
|
||
type: NodePort
|
||
```
|
||
|
||
注意：
|
||
|
||
此yaml文件中创建的Deployment、Service；还使用了持久化存储；需要借鉴使用。
|
||
|
||
#### 2.运行状态
|
||
|
||
|
||
|
||
#### 3.访问服务
|
||
|
||
|
||
|
||
注意：
|
||
|
||
以上任何一项都可以说明Kubernetes集群中Containerd可以使用Harbor仓库http方式下载镜像 |