kubernetes ImagePullSecret的创建与使用

创建secret

kubectl create secret docker-registry <secret名称(docker-image-secret)> --namespace=<命名空间名称> --docker-username=<镜像仓库用户名> --docker-password=<镜像仓库密码> --docker-server=<镜像仓库地址> 

创建serviceaccount关联secret

apiVersion: v1
kind: ServiceAccount
metadata:
  name: docker-image
  namespace: default
imagePullSecrets:
- name: docker-image-secret

创建测试文件

apiVersion: apps/v1
kind: Deployment
metadata:
  name: docker-image-test
spec:
  selector:
    matchLabels:
      app: docker-image-test
  replicas: 2
  template:
    metadata:
      labels:
        app: docker-image-test
    spec:
      terminationGracePeriodSeconds: 3
      serviceAccount: docker-image
      containers:
      - name: docker-image-test
        image: hub.baidubce.com/my_image/ccreate-bi:202006021528
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 80
          name: docker-image-test

• 也可以直接绑定secret

apiVersion: apps/v1
kind: Deployment
metadata:
  name: docker-image-test
spec:
  selector:
    matchLabels:
      app: docker-image-test
  replicas: 2
  template:
    metadata:
      labels:
        app: docker-image-test
    spec:
      terminationGracePeriodSeconds: 3
      imagePullSecrets:
      - name: base-image
      containers:
      - name: docker-image-test
        image: hub.baidubce.com/my_image/ccreate-bi:202006021528
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 80
          name: docker-image-test

创建pod查看

kubectl apply docker-image-test.yaml

• 通过describe pod可查看镜像下载是否成功