Conecte-se ao cluster do kubernetes em jenkins

Configure o plug-in do kubernetes para se conectar ao cluster do kubernetes

1. Clique em Gerenciamento do Sistema -> Configurações do Sistema - adicione uma nuvem, selecione kubernets no menu suspenso e adicione

2. Preencha o conteúdo de configuração do Cloud Kubernetes

Nota: adicione o valor Name arbitrariamente e adicione o endereço de conexão e porta K8S apiserver ao valor de URL do Kubernetes para
configurar o arquivo de verificação para kubernetes em nuvem para se conectar ao cluster K8S


1. Obtenha o arquivo /root/.kube/config do K8S
cat /root/.kube/config


apiVersion: v1clusters:- cluster:    certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5RENDQWJDZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJd01EVXlPVEUwTlRnMU5Gb1hEVE13TURVeU56RTBOVGcxTkZvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTWh6CmE5bkc5NFp1SVZNZEp0NGo1dGlYcEl2WmIvczFKMVNuTVhYREt0djVqQk4xU0NoMU1VU3dYWVNlLzdVWGtjUWwKTHlUTThQVmdtY0d5TFFiOGJxZDRvS3FRQW1ZR2UzNHRtN3FoYzExSEF5V2JvSWt4QmMyV21DNmwxc1U3MGlDNQpqY216ZGMrR3h2a0MyQmx2NE1Gam5YTmwxRkF2OTdhT0pIemh4UUJwanZhMUdrdkJoVWEvdDh6Mm5GVTlwVUVrClgzZGVoNWJmRi91WVVRRlJlUEVuZHdrdGxnd1V4VUN2ZDJNNFBsOWhQMDA0L3gvbGZOeEFBTGRpNkhMOCtoSFUKeWRSTjV5dEl2Wm5ib093MXEyUlJnWU9sVEVDUFRNYmFCZks0STBkVjFkYVZVK3l2OGo1QmVIWktabE1pbGxzNApuSWJFOXU4UlR0cjl5anNlbmRFQ0F3RUFBYU1qTUNFd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFKZml6SVNDMWJ5UkRBaHlPZTJsK051eHF6cGkKVURxRlZSWHMzTEIzeUpWeE9PMUhlSTYwbzgwWndsSFJybVA0Mmt2QVdvcURwd3BXK1FUUUptemFXa0JtUllWRApqZkNxVVpJS0FjTENIY3duL1I3NnkySlE0TTdXR3c4VGc5dnRuMmdXRktrOWZabTM2c0ZLMjdYQTFxWVBrOGJsClBFRUd3RXYwbnBSUjZialJEdjladXZydkJQU1NhdFo5TzFoZHZ2bVJLWk95dHR6THFVOVVPUnAxemJ6OGFOSTcKVmNhN3ZFMnV5SnJvWnNLRmxvb05neVhhRnBtSEpNdzM2Smx3SEozcFRvMWMvQVl6TTY1QU81d0JrS3M4YStOYgpOcDRsS3Jtem9aaEZqeTNLL2FTK3Y4S3ZWOEVpVVJ3MXVJV1R4U1dydE9JeE9rdEQ0THZLb2pwM255az0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=    server: https://192.168.0.6:6443  name: kubernetescontexts:- context:    cluster: kubernetes    user: kubernetes-admin  name: kubernetes-admin@kubernetescurrent-context: kubernetes-admin@kuberneteskind: Configpreferences: {}users:- name: kubernetes-admin  user:    client-certificate-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM4akNDQWRxZ0F3SUJBZ0lJY3FZaFRlSEh0eDR3RFFZSktvWklodmNOQVFFTEJRQXdGVEVUTUJFR0ExVUUKQXhNS2EzVmlaWEp1WlhSbGN6QWVGdzB5TURBMU1qa3hORFU0TlRSYUZ3MHlNVEExTWpreE5EVTROVGhhTURReApGekFWQmdOVkJBb1REbk41YzNSbGJUcHRZWE4wWlhKek1Sa3dGd1lEVlFRREV4QnJkV0psY201bGRHVnpMV0ZrCmJXbHVNSUlCSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DQVE4QU1JSUJDZ0tDQVFFQXZLTi96cFRhRzlXRUpLWnoKN0NndUJQZkdpODJYOWZ2YzdMeVdFVnp2aXFLV3N3c2lSZFNlLzNrZmVTTFJ3eE01Ykpvam8zL0VqWGJJWGFwegpXdGRkaXlwY3d0cTdGRWZ4V3BZOFdjOUw1eU1kajlpSWY0ZkEvVHE0RVM0MVVBWUxGaGVCRWEvNEJOSHBubWprCmZXWUMxdzY0ZXhEeTA3RWU3Zk1TS2xuTlJQaC91Y01SRURRaG1POHYzOVVHSnZPQmtwVEFLUENqaDA5V3Z5M3kKMWpMQ3pYSHFreTFDbFErTU16U3RFN2RtT2p6d3R4S2I1KzVLT0ZXemwrNzZEa1dwQ3pEazdWNXIzd1hVMlhIVwpYZzY5MTlBVi9PS3E0dXprdDlxZjQyWTZTYjRBQm5tN2FnanRQYmJTdW9iZVowL3NHUG1nRGtMT0RQS2lTSG56CkdmaDVPd0lEQVFBQm95Y3dKVEFPQmdOVkhROEJBZjhFQkFNQ0JhQXdFd1lEVlIwbEJBd3dDZ1lJS3dZQkJRVUgKQXdJd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFFSWV4aE5NZXVCVWVQRngvQ2cvV0NlbnhwVm5NOWJPbERvMApESXE1RndnMTc3WUlheGY0U0h3MzBWeUZVN1BEamhRM3N1SFlQYkVSTFFIL0c4eC9IS0F6VEF2RldKNmM2Sy9oCmtBU2NjdktkUnBlTUVQU3VldXlVMkNhd0x0MExIWFpVb09iS0lWalNidXJvdTNwWGRUOU5QckdiVWdNRkQxOWYKN0Y4NTVzeTNVUHdGOEJjVGZMTXd2emN3bEV5TFlORWxTcTFnejVrLzc1Q2xMUHZFeTd1SE1NME5ONDVVVGNkUQpmcEdJK0Q5bGF1cUgxeE15T0c1K2c4SEEranlkU2gyNnUzMy9nSTA4RzJxR1lyK29kclNIZ25rVGQyZ055SVoxCmxDUjJ1Z05ybTcxb3R5T3dndWJUbWwyZFA1RFJ2S29nd1Q1WXdBTHlPQ0k0d05nT3ZsND0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=    client-key-data: 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

2. Obtenha o conteúdo dos dados da autoridade de certificação em /root/.kube/config e converta-o em um arquivo codificado em base 64
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 = | base64 -d> /opt/crt/ca.crt

Preencha o conteúdo de ca.crt na coluna da chave do certificado do servidor Kubernetes de jenkins kubernetes


3. Obtenha o conteúdo dos dados do certificado do cliente e dos dados da chave do cliente em /root/.kube/config e converta-os em arquivos codificados em base64
= | base64 -d> /opt/crt/client.crt


Q2dZQlBoSmJML085dWlPSU1BR1hkN1VGZ3h5amZKS3hzN2ZYODZtT1YKem9MdTNuZFhBTlV4dUdkSTZIM3lGaGtReWxDYTYzMHpJUDVpOFk2cmpkQm5BYVcyRDUvZjUrODhFSzJkd1RxVAp6alIxWU41cktJVno5OGFtM1ZWeEVSbHZJUzA3V01kc3VZclN5M1pab1RMaW52SjNFTnNFWWRwbDVLQ20wSHVtCjJyU1NRd0tCZ1FDd29WQitDQkJoaC84aXljQ08yZ29aWjl1aEFFTWI2OVgxcGYzRzRONFNORlNwclJHeGF4T04Kek9ZbU5KU1BIbDcxQmpGYzM4VFVHb0Z4ckl3Mnl6MTNDaXlkTTdJT2lmd084a21STU5LR1VDWmNyTzJISEZadAo2dVA3QWdMSUg2dzdia3VkamZ1NktYRmhCMjBsRC9BWU1FYkpQM1F1MFMyTkFUVEZySEZnTXc9PQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo = | base64 -d> /opt/crt/client.key


4. Produza o arquivo de certificação Client P12 cert.pfx e baixe-o no
openssl local pkcs12 -export -out /opt/crt/cert.pfx -inkey /opt/crt/client.key -in / opt / crt / client. crt- certfile /opt/crt/ca.crt
Insira a senha de exportação:
Verificando-Insira a senha de exportação:
sz /opt/crt/cert.pfx
Observação: personalize uma senha e lembre-se


5. Adicione credenciais em Cloud Kubernetes

Nota: O certificado de upload acabou de ser gerado e baixado para o arquivo cert.pfx local da última vez, o valor da senha é adicionado à chave inserida quando o arquivo cert.pfx foi gerado


6. Teste a conexão com o cluster kubernetes

Observação: o valor do namespace do Kubernetes adiciona o conteúdo do nome na seção do cluster no arquivo /root/.kube/config


Acho que você gosta

Origin blog.51cto.com/15127502/2655041
Recomendado
Clasificación