k8s-創建harbor私有鏡像倉庫

#tar zxvf harbor-offline-installer-v1.4.0.tgz

#mv harbor/ /opt

#mkdir /data/harbor
#用來保存harbor的文件和目錄

修改配置文件
#cd /opt/harbor

#vim harbor.cfg

hostname = reg.yunwei.edu

ui_url_protocol = https

ssl_cert = /data/harbor/cert/server.crt

ssl_cert_key = /data/harbor/cert/server.key

secretkey_path = /data/harbor

harbor_admin_password = admin

#vim docker-compose.clair.yml

volumes:
      - /data/harbor/clair-db:/var/lib/postgresql/data:z

#vim docker-compose.notary.yml

 volumes:
      - /data/harbor/notary-db:/var/lib/mysql:z

#vim docker-compose.yml

 volumes:
      #- /var/log/harbor/:/var/log/docker/:z

      - /data/harbor/:/var/log/docker/:z

volumes:
      - /data/harbor/registry:/storage:z

volumes:
      - /data/harbor/database:/var/lib/mysql:z

volumes:
      - /data/harbor/config/:/etc/adminserver/config/:z
      - /data/harbor/secretkey:/etc/adminserver/key:z
      - /data/harbor/:/data/:z

volumes:
      - ./common/config/ui/app.conf:/etc/ui/app.conf:z
      - ./common/config/ui/private_key.pem:/etc/ui/private_key.pem:z
      - ./common/config/ui/certificates/:/etc/ui/certificates/:z
      - /data/harbor/secretkey:/etc/ui/key:z
      - /data/harbor/ca_download/:/etc/ui/ca/:z
      - /data/harbor/psc/:/etc/ui/token/:z
volumes:
      - /data/harbor/job_logs:/var/log/jobs:z
      - ./common/config/jobservice/app.conf:/etc/jobservice/app.conf:z
      - /data/harbor/secretkey:/etc/jobservice/key:z

#cd /root/docker/kubernetes

#tar zxvf ca.tar.gz

#mv ca /data/harbor/cert

#vim /opt/harbor/harbor.cfg

ssl_cert = /data/harbor/cert/harbor.crt
ssl_cert_key = /data/harbor/cert/harbor.key 

安裝harbor程序

#sh /opt/harbor/install.sh

 

各個節點設置登錄harbor私有鏡像倉庫

部署節點

#mkdir /etc/docker/certs.d/reg.yunwei.edu/ -p

#cp /data/harbor/cert/ca.crt /etc/docker/certs.d/reg.yunwei.edu/


#scp /data/harbor/cert/ca.crt pikachu2:/etc/docker/certs.d/reg.yunwei.edu/
#scp /data/harbor/cert/ca.crt pikachu3:/etc/docker/certs.d/reg.yunwei.edu/
#scp /data/harbor/cert/ca.crt pikachu4:/etc/docker/certs.d/reg.yunwei.edu/

所有節點修改域名解析

上傳鏡像到私有倉庫

先修改鏡像的名字
#docker tag httpd:latest reg.yunwei.edu/test/httpd:latest
上傳
#docker push reg.yunwei.edu/test/httpd:latest

節點下載鏡像
#docker pull reg.yunwei.edu/test/httpd:latest