User Tools
система_kubernetes
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
система_kubernetes [2026/01/19 17:53] val |
система_kubernetes [2026/01/29 14:02] (current) val [Управление образами] |
||
|---|---|---|---|
| Line 146: | Line 146: | ||
| <code> | <code> | ||
| - | gitlab-runner@server:~$ time minikube start --driver=docker --insecure-registry "server.corpX.un:5000" | + | gitlab-runner@server:~$ time minikube start --driver=docker --insecure-registry "server.corpX.un:5000" #--registry-mirror="https://mirror.gcr.io" |
| real 3m9.625s ... 41m8.320s | real 3m9.625s ... 41m8.320s | ||
| ... | ... | ||
| Line 601: | Line 601: | ||
| root@cf764ca3b291:/kubespray# ansible all -m ping -i /inventory/inventory.ini | root@cf764ca3b291:/kubespray# ansible all -m ping -i /inventory/inventory.ini | ||
| + | |||
| + | root@cf764ca3b291:/kubespray# ###cp -rv inventory/sample/group_vars/ /inventory/ | ||
| root@cf764ca3b291:/kubespray# time ansible-playbook -i /inventory/inventory.ini cluster.yml | root@cf764ca3b291:/kubespray# time ansible-playbook -i /inventory/inventory.ini cluster.yml | ||
| Line 631: | Line 633: | ||
| server:~# ssh kubeN service containerd restart | server:~# ssh kubeN service containerd restart | ||
| + | </code> | ||
| + | |||
| + | === Использование proxy в containerd === | ||
| + | <code> | ||
| + | # systemctl edit containerd | ||
| + | </code><code> | ||
| + | ... | ||
| + | [Service] | ||
| + | Environment="HTTP_PROXY=http://openproxy2.bmstu.ru:3128" | ||
| + | Environment="HTTPS_PROXY=http://openproxy2.bmstu.ru:3128" | ||
| + | Environment="NO_PROXY=localhost,127.0.0.1,::1,10.0.0.0/8,192.168.0.0/16,.svc,.cluster.local" | ||
| + | ... | ||
| </code> | </code> | ||
| ==== Обновление сертификатов ==== | ==== Обновление сертификатов ==== | ||
| Line 1025: | Line 1039: | ||
| </code><code> | </code><code> | ||
| $ kubectl apply -f first-pool.yaml | $ kubectl apply -f first-pool.yaml | ||
| + | |||
| + | $ kubectl -n metallb-system get ipaddresspools.metallb.io | ||
| + | |||
| + | $ kubectl get services -A | grep LoadBalancer | ||
| ... | ... | ||
| Line 2497: | Line 2515: | ||
| student@vps:~$ kubectl -n cert-manager get all | student@vps:~$ kubectl -n cert-manager get all | ||
| - | student@vps:~$ #kubectl create secret generic cert-manager-tsig-secret --from-literal=tsig-secret-key="NNN...NNN" -n cert-manager | + | student@vps:~$ #kubectl create secret generic cert-manager-tsig-secret --from-literal=tsig-secret-key="s751+e/OkNNNNNN=" -n cert-manager |
| student@vps:~$ cat ...issuer.yaml | student@vps:~$ cat ...issuer.yaml | ||
| Line 2567: | Line 2585: | ||
| #kind: ClusterIssuer | #kind: ClusterIssuer | ||
| #kind: Issuer | #kind: Issuer | ||
| + | privateKey: | ||
| + | rotationPolicy: Always | ||
| </code> | </code> | ||
система_kubernetes.1768834424.txt.gz · Last modified: 2026/01/19 17:53 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
