差異處
這裏顯示兩個版本的差異處。
| 下次修改 | 前次修改 | ||
| tech:harbor_rancher_ca [2020/12/11 00:15] – 建立 jonathan | tech:harbor_rancher_ca [2021/04/20 09:12] (目前版本) – [Harbor 使用 Private CA, Rancher 出現 ErrImagePull: rpc error ..... x509] jonathan | ||
|---|---|---|---|
| 行 1: | 行 1: | ||
| + | ====== Rancher + Harbor + private CA ====== | ||
| + | * Harbor Info: | ||
| + | * URL - https:// | ||
| + | * User tryweb | ||
| + | * Add Public Project - tryweb {{: | ||
| + | * Login Harbor:< | ||
| + | localadmin@iiidevops1: | ||
| + | [sudo] password for localadmin: | ||
| + | Username: tryweb | ||
| + | Password: | ||
| + | WARNING! Your password will be stored unencrypted in / | ||
| + | Configure a credential helper to remove this warning. See | ||
| + | https:// | ||
| + | |||
| + | Login Succeeded | ||
| + | </ | ||
| + | | ||
| + | ===== push 建立好的 image 到 Harbor ===== | ||
| + | * 參考網址 - https:// | ||
| + | * Exp. 建立的 image : devops-db: | ||
| + | sudo docker build ~/ | ||
| + | </ | ||
| + | * 檢視本地 images 清單< | ||
| + | localadmin@iiidevops1: | ||
| + | REPOSITORY | ||
| + | devops-db | ||
| + | postgres | ||
| + | iiiorg/ | ||
| + | </ | ||
| + | * 使用 tag 來設定 image Harbor 的位址, 專案: | ||
| + | sudo docker tag devops-db: | ||
| + | |||
| + | localadmin@iiidevops1: | ||
| + | REPOSITORY | ||
| + | devops-db | ||
| + | postgres | ||
| + | iiiorg/ | ||
| + | 10.20.0.71: | ||
| + | </ | ||
| + | * push 至 Harbor< | ||
| + | localadmin@iiidevops1: | ||
| + | The push refers to repository [10.20.0.71: | ||
| + | dad28bba27f8: | ||
| + | 21086d1e867a: | ||
| + | 5f7e00914c15: | ||
| + | af0b57c72d50: | ||
| + | e0cf62a99bcd: | ||
| + | b1096cae6203: | ||
| + | e076f7b31275: | ||
| + | 9cd7c4e12078: | ||
| + | 73cf3adf6112: | ||
| + | 065d45f80eac: | ||
| + | 3aac10e9b066: | ||
| + | 117725f5c702: | ||
| + | a01778662164: | ||
| + | 883d24bc9ae1: | ||
| + | f5600c6330da: | ||
| + | v1: digest: sha256: | ||
| + | </ | ||
| + | |||
| + | ===== Rancher yaml 取用的寫法 ===== | ||
| + | * Exp. deploy-devops-develop/ | ||
| + | apiVersion: apps/v1 # for versions before 1.9.0 use apps/ | ||
| + | kind: Deployment | ||
| + | metadata: | ||
| + | name: devopsdb | ||
| + | spec: | ||
| + | replicas: 1 | ||
| + | selector: | ||
| + | matchLabels: | ||
| + | app: devopsdb | ||
| + | strategy: | ||
| + | type: Recreate | ||
| + | template: | ||
| + | metadata: | ||
| + | labels: | ||
| + | app: devopsdb | ||
| + | spec: | ||
| + | containers: | ||
| + | - name: devopsdb | ||
| + | image: 10.20.0.71: | ||
| + | env: | ||
| + | - name: POSTGRES_PASSWORD | ||
| + | value: xxxxxxxx | ||
| + | - name: POSTGRES_DB | ||
| + | value: devopsdb | ||
| + | ports: | ||
| + | - containerPort: | ||
| + | volumeMounts: | ||
| + | - name: db-data | ||
| + | mountPath: / | ||
| + | volumes: | ||
| + | - name: db-data | ||
| + | nfs: | ||
| + | server: 10.20.0.71 | ||
| + | path: / | ||
| + | </ | ||
| + | |||
| + | ===== Harbor 使用 Private CA, Rancher 出現 ErrImagePull: | ||
| + | * 參考 - https:// | ||
| + | * {{: | ||
| + | * 完整錯誤訊息大致如下: | ||
| + | ErrImagePull: | ||
| + | * 解決方法一 : 讓 Rancher 所使用的自簽憑證 Exp. 10.20.0.71.crt 複製到 Rancher cluster 所有 k8s 主機內並設定信任這憑證, | ||
| + | * [email protected] <cli> | ||
| + | sudo cp 10.20.0.71.crt / | ||
| + | sudo update-ca-certificates | ||
| + | sudo systemctl restart docker.service | ||
| + | ls / | ||
| + | </ | ||
| + | * 解決方法二 : 將所有 k8s 主機內的 Docker 信任 Harbor 的 IP:Port 10.20.0.71: | ||
| + | * [email protected] <cli> | ||
| + | sudo vi / | ||
| + | { | ||
| + | " | ||
| + | } | ||
| + | </ | ||
| + | |||
| + | {{tag> | ||