harbor+k8s deploy

install docker

https://docs.docker.com/engine/install/
添加自动补全

1. yum -y install bash-completion
2. source /usr/share/bash-completion/bash_completion

复制代码

install and configuration harbor

1. [root@Rocky-Harbor certs]# mkdir -pv /k8s/softwares/certs/{ca,server,client}
3. [root@Rocky-Harbor certs]# tar -zxvf harbor-offline-installer-v2.9.3.tgz
5. [root@Rocky-Harbor certs]# openssl genrsa -out ca/ca.key 4096
7. [root@Rocky-Harbor certs]# openssl req -x509 -new -nodes -sha512 -days 3650  -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=foam.com"  -key ca/ca.key  -out ca/ca.crt
9. [root@Rocky-Harbor certs]# openssl req -x509 -new -nodes -sha512 -days 3650  -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=foam.com"  -key ca/ca.key  -out ca/ca.crt
11. [root@Rocky-Harbor certs]# openssl genrsa -out server/harbor.foam.com.key 4096
13. [root@Rocky-Harbor certs]# openssl req -sha512 -new     -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=harbor.foam.com"     -key server/harbor.foam.com.key     -out server/harbor.foam.com.csr
15. [root@Rocky-Harbor certs]# cat > v3.ext <<-EOF
16. authorityKeyIdentifier=keyid,issuer
17. basicConstraints=CA:FALSE
18. keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
19. extendedKeyUsage = serverAuth
20. subjectAltName = @alt_names
22. [alt_names]
23. DNS.1=foam.com
24. DNS.2=foam
25. DNS.3=harbor.foam.com
26. EOF
28. [root@Rocky-Harbor certs]# openssl x509 -req -sha512 -days 3650     -extfile v3.ext     -CA ca/ca.crt -CAkey ca/ca.key -CAcreateserial     -in server/harbor.foam.com.csr     -out server/harbor.foam.com.crt
30. [root@Rocky-Harbor certs]# openssl x509 -inform PEM -in server/harbor.foam.com.crt -out server/harbor.foam.com.cert
32. [root@Rocky-Harbor certs]# mkdir -pv /etc/docker/certs.d/harbor.foam.com
34. [root@Rocky-Harbor certs]# cp -r /k8s/softwares/certs/client/* /etc/docker/certs.d/harbor.foam.com/
36. [root@Rocky-Harbor certs]# echo ip harbor.foam.com >> /etc/hosts
38. [root@Rocky-Harbor harbor]# echo alias yy=\'egrep -v "\^.*#\|\^\$"\'  >> /root/.bashrc
40. [root@Rocky-Harbor harbor]# source /root/.bashrc
42. # harbor configuration
43. hostname: harbor.foam.com
44. http:
45.   port: 80
46. https:
47.   port: 443
48.   certificate: /k8s/softwares/certs/server/harbor.foam.com.crt
49.   private_key: /k8s/softwares/certs/server/harbor.foam.com.key
50. harbor_admin_password: foam
52. [root@Rocky-Harbor harbor]# ./install
54. [root@Rocky-Harbor harbor]# docker login -u admin -p foam harbor.foam.com
55. WARNING! Using --password via the CLI is insecure. Use --password-stdin.
56. WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
57. Configure a credential helper to remove this warning. See
58. https://docs.docker.com/engine/reference/commandline/login/#credentials-store
60. Login Succeeded
62. [root@Rocky-Harbor harbor]# docker logout harbor.foam.com
64. [root@Rocky-Harbor harbor]# scp /k8s/softwares/certs/client/* 192.168.100.15:/etc/docker/certs.d/harbor.foam.com
65. [root@Rocky-Harbor harbor]# scp /k8s/softwares/certs/client/* 192.168.100.7:/etc/docker/certs.d/harbor.foam.com
66. [root@Rocky-Harbor harbor]# scp /k8s/softwares/certs/client/* 192.168.100.8:/etc/docker/certs.d/harbor.foam.com

复制代码

install kubernetes

[code]# All Node and install docker[root@Rocky-kubernetes-control ~]# swapoff -a && sysctl -w vm.swappiness=0[root@Rocky-kubernetes-control ~]# sed -ri '/^[^#]*swap/s@^@#@' /etc/fstab[root@Rocky-kubernetes-control ~]# ifconfig  eth0  | grep ether | awk '{print $2}'[root@Rocky-kubernetes-control ~]# cat > /etc/modules-load.d/k8s.conf  /etc/sysctl.d/k8s.conf  /etc/yum.repos.d/kubernetes.repo