k8s部署harbor

Question

k8s拉取harbor镜像的时候，配置https就会报错，网上找了好久不知道原因

Answer 1

引自免费微信小程序：皆我百晓生

要解决这个问题，首先确保您已经正确安装了Kubernetes和Harbor。然后，按照以下步骤操作：

1. 首先，删除旧的Secret文件（如果有的话）。

kubectl delete secret harbor-registry-keycloak -n registry

1. 创建一个新的Secret文件。

apiVersion: v1
kind: Secret
metadata:
  name: harbor-registry-keycloak
type: Opaque
data:
  registry-url: "https://10.15.N2:"
  username: "admin"
  password: ""

1. 更新您的YAML文件中的registry_url、username和password字段，并确保它们与您的Harbor配置相匹配。

apiVersion: v1
kind: ConfigMap
metadata:
  name: harbor-config
data:
  url: "https://10.15.N2:"
  username: "admin"
  password: ""
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: harbor-admin
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: harbor-deployment
spec:
  replicas: 1
  selector:
    matchLabels:
      app: harbor
  template:
    metadata:
      labels:
        app: harbor
    spec:
      containers:
      - name: harbor-container
        image: harbor/harbor
        ports:
        - containerPort: 80
          protocol: TCP
      volumeMounts:
      - name: harbor-volume
        mountPath: /var/lib/harbor
      volumes:
      - name: harbor-volume
        hostPath:
          path: /etc/hosts

1. 将上述内容整合到您的YAML文件中，覆盖原始的YAML文件。

apiVersion: kubernetes.config.k8s.io/v1beta1
clusters:
  kube-system:
    cluster:
      server: https://localhost:6443
      certFile: /etc/kubernetes/pki/certs/kube-system-client.crt
      keyFile: /etc/kubernetes/pki/certs/kube-system-client.key
  default:
    cluster:
      server: http://localhost:8080
    client:
      auth: admin
      cert-file: /etc/kubernetes/pki/ca.crt
      key-file: /etc/kubernetes/pki/client.pem
users:
  - name: admin
    groups:
    - users
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: harbor-config
data:
  url: "https://10.15.N2:"
  username: "admin"
  password: ""
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: harbor-deployment
spec:
  replicas: 1
  selector:
    matchLabels:
      app: harbor
  template:
    metadata:
      labels:
        app: harbor
    spec:
      containers:
      - name: harbor-container
        image: harbor/harbor
        ports:
        - containerPort: 80
          protocol: TCP
      volumeMounts:
      - name: harbor-volume
        mountPath: /var/lib/harbor
      volumes:
      - name: harbor-volume
        hostPath:
          path: /etc/hosts
---
apiVersion: v1
kind: Service
metadata:
  name: harbor-service
spec:
  type: LoadBalancer
  selector:
    app: harbor
  ports:
  - port: 80
    targetPort: 80
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: harbor-deployment
spec:
  replicas: 1
  selector:
    matchLabels:
      app: harbor
  template:
    metadata:
      labels:
        app: harbor
    spec:
      containers:
      - name: harbor-container
        image: harbor/harbor
        ports:
        - containerPort: 80
          protocol: TCP
      volumeMounts:
      - name: harbor-volume
        mountPath: /var/lib/harbor
      volumes:
      - name: harbor-volume
        hostPath:
          path: /etc/hosts
---
apiVersion: v1
kind: Service
metadata:
  name: harbor-service
spec:
  type: LoadBalancer
  selector:
    app: harbor
  ports:
  - port: 80
    targetPort: 80

1. 使用kubectl apply -f <filename>命令将更改应用于集群。

2. 确保所有相关组件都运行正常。在容器启动时检查其状态。

3. 调试HTTPS请求错误。这可能涉及到证书管理或其他环境变量设置的问题。您可以尝试以下步骤来解决此问题：

   a. 检查证书是否有效。

   b. 检查DNS解析设置。

   c. 确保没有其他外部服务器阻塞了请求。

4. 如果问题仍然存在，请提供更多关于环境细节的信息，以便更准确地定位问题。