kubernetes创建的pod如何从私有镜像仓库拉取镜像

您所在的位置：网站首页 › 制定暑假作业计划表 › kubernetes创建的pod如何从私有镜像仓库拉取镜像

kubernetes创建的pod如何从私有镜像仓库拉取镜像

#kubernetes创建的pod如何从私有镜像仓库拉取镜像| 来源: 网络整理| 查看: 265

kubernetes创建的pod默认会从国外拉取镜像，如何使k8s从指定的镜像仓库拉取镜像创建应用？

一、创建secret

命令行方式创建

# kubectl create secret docker-registry myregistrykey --docker-server=DOCKER_REGISTRY_SERVER --docker-username=DOCKER_USER --docker-password=DOCKER_PASSWORD --docker-email=DOCKER_EMAIL

例如：

kubectl -n k8s-ecoysystem-apps create secret docker-registry registry-key \ --docker-server=registry.test.com \ --docker-username=admin \ --docker-password=admin123 \ [email protected]

yaml方式创建1.在docker服务器上登录镜像仓库

[root@node ~]# docker login registry.test.com Username: admin Password: WARNING! Your password will be stored unencrypted in /root/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded

2.base64加密/root/.docker/config.json

# cat ~/.docker/config.json | base64

3.编写yaml文件

将上述步骤中经过base64加密的值拷贝到.dockerconfigjson键对应的值位置# cat myregistrykey.yaml apiVersion: v1 kind: Secret metadata: name: myregistrykey data: .dockerconfigjson: UmVhbGx5IHJlYWxseSByZWVlZWVlZWVlZWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGx5eXl5eXl5eXl5eXl5eXl5eXl5eSBsbGxsbGxsbGxsbGxsbG9vb29vb29vb29vb29vb29vb29vb29vb29vb25ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubmdnZ2dnZ2dnZ2dnZ2dnZ2dnZ2cgYXV0aCBrZXlzCg== type: kubernetes.io/dockerconfigjson

4.创建secret

# kubectl apply -f myregistrykey.yaml

二、使用secret在部署文件中使用secret使用方式imagePullSecrets: - name: myregistrykey # secret名称例如：1.创建Pod资源

# cat nginx-pod.yamlapiVersion: v1 kind: Pod metadata: name: tomcat spec: containers: - name: tomcat-c image: tomcat imagePullSecrets: - name: myregistrykey# kubectl apply -f nginx-pod.yaml

2.创建Deployment

# cat nginx-deploy.yamlapiVersion: apps/v1 kind: Deployment metadata: name: nginx spec: selector: matchLabels: app: nginx replicas: 2 template: metedata: name: nginx labels: app: nginx spec: imagePullSecrets: - name: myregistrykey containers: - name: nginx-c image: nginx imagePullPolicy: Always# kubectl apply -f nginx-deploy.yaml

【本文地址】

kubernetes创建的pod如何从私有镜像仓库拉取镜像

kubernetes创建的pod如何从私有镜像仓库拉取镜像

今日新闻

推荐新闻