K8S/Kubernetes

同事的jenkins 链接自己的 k8s 总是出问题 给出了资料和服务器 进行处理。

同时给出的参考资料：https://blog.csdn.net/diantun00/article/details/81180694

这边用自己的服务器简单进行了测试。

jenkins的地址

http://10.24.101.161:8080/configure

k8s 集群的

https://10.24.103.1:6443

1. 验证jenkins 已经添加了 kubernetes 的插件

如果没有的话自行安装

然后 进行系统配置

拖到最后面 添加一个云

我的k8s 是使用 kubeadm 直接 安装的 比较简单， 根据 作者的说法进行处理

进入 kubernetes的配置目录

cd /etc/kubernetes

查看 admin.conf

cat admin.conf

我这边的内容为：

反正是测试服务器---说不定明天我就删了-- 证书 密钥 无所谓。。。

apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5RENDQWJDZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRFNE1EVXhPVEEyTURBeE5Gb1hEVEk0TURVeE5qQTJNREF4TkZvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTmJ4ClhvdkFiL0pvNkluOGo3MWgwNHFRQnMwdGNLMU91cnY3OVhPbEZReEdpUUpUVnE0L1VCVXhNenhvaVFnaDBqanYKbWk3T2RjMlZUTmR1bVpPbi8rY1B1MldkVTF6R05rb04yeFYvaFN0Y3k0UmFiNEF4MCt4M3NLS0NFY1hpeVZlYgpNbm52NnM1T2UyOXVJL2hBK1cxVnRuekcxclpqaTd5Umo2blpQZnN1WG5kN2xQZ0ZWRlRsTWxpMTFVa3R5RVg4CmtMVys2Skx5eW5PWUZndVg4cGp1andINWxlWWs0R2xKV0NGNU10czBldlJaTFVMWVhUQi96NDZEL3pFdUgxc0kKZHlsTFpOVTdqUE5CK0tWMUUwVm1lVmRvbE1WejI4SWZZbUVoR1FJTTN1SmNNRTRlWTFSQlVUWDFUbHQ0TmNMSgp6MlNDb2ZvNURNUjNsUTdDbkEwQ0F3RUFBYU1qTUNFd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFHQmxBY2pvOGp4M0RLZyt1K0hQTzZ3Z3dYMDMKbkg5cnMyMEViNHBYaVVrUkpxUGlDa096WW5xYVl1S2pNRjhGb2VVRmViaDErQ3B1aFY1U0hQWVlsK1EvRCt4dApMYzVlNFVoMFZ6RnI1MWJMWDd0UXFNaHpxWlo0czRIVW1IRlVyclJPZGw3QmduRlFZZkVGRlRKZTlBRGY4ZTBQCldBQ1FXZXJvUGpPMFY2K3NoU3VpZlFMb1k1NStWREd6anFOWnlqUkdUOUFnUFBJdDdrOHVITnRpQUROOWFIVW0KN3RrR3hlNEhMNnFzSnc5dGhNQ3U1R3dvbDF6THcrMzZUdjR0YjJmWlZ0UTZXakh4RUFKMVJZcFdoU0tsVnpqUQo1WlZ5RWgraDZzL01YR1BtRW5SaDNVMmg2YjdjTVNROElQZDFlTDE5SnA1dXZzN3VqcEkzalB2dUlRVT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
    server: https://10.24.103.1:6443
  name: kubernetes
contexts:
- context:
    cluster: kubernetes
    user: kubernetes-admin
  name: kubernetes-admin@kubernetes
current-context: kubernetes-admin@kubernetes
kind: Config
preferences: {}
users:
- name: kubernetes-admin
  user:
    client-certificate-data: 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
    client-key-data: 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

 

将 三个内容进行处理。 转换成相应的内容 

echo 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
|base64 -d >ca.crt

原作者写的更好， 这里直接copy了

 

用到上面提到的kubernetes的配置文件

文件中有三个值 certificate-authority-data 、client-certificate-data 、 client-key-data 

解码它们获得证书 ，注意将上面的值替换称自己的一大长传字符串

echo certificate-authority-data | base64 -d > ca.crt
echo client-certificate-data | base64 -d > client.crt
echo client-key-data | base64 -d > client.key

然后根据如上内容生成客户端认账的 证书

openssl pkcs12 -export -out cert.pfx -inkey client.key -in client.crt -certfile ca.crt

注意导出时收入输入密码。

这里完整的复制的原作者的内容 openssl 的使用虽然之前学过 但是太不精通了。。

然后k8s 里面进行处理

将 ca.crt base64 解码之后的证书内容放进来

如图示

 

 然后添加jenkins的证书

选择 证书

 

 然后 上传 文件 输入导出时的密码

然后 进行测试

能够成功。

管理jenkins的凭据

不知道怎么删除。。。