gitlab集成kubernetes

news2024/12/25 22:22:16

gitlab集成kubernetes

1. 管理员通过服务模板添加Kubernetes集群，是生效所有项目

在这里插入图片描述

2. 群组中也可以添加Kubernetes集群，优先于管理员添加的全局集群

在这里插入图片描述

3. 链接现有集群

在这里插入图片描述

4. 配置集群信息

在这里插入图片描述
http://178.119.31.180/help/user/project/clusters/add_existing_cluster.md

CA certificate

kubectl get secrets

kubectl get secret <secret name> -o jsonpath="{['data']['ca\.crt']}" | base64 --decode

Token

Create a file called gitlab-admin-service-account.yaml with contents:

apiVersion: v1
kind: ServiceAccount
metadata:
  name: gitlab
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: gitlab-admin
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
 - kind: ServiceAccount
    name: gitlab
    namespace: kube-system

Apply the service account and cluster role binding to your cluster:

kubectl apply -f gitlab-admin-service-account.yaml

Output:

serviceaccount "gitlab" created
clusterrolebinding "gitlab-admin" created

Retrieve the token for the gitlab service account:

kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep gitlab | awk '{print $1}')

Copy the <authentication_token> value from the output:

Name:         gitlab-token-b5zv4
Namespace:    kube-system
Labels:       <none>
Annotations:  kubernetes.io/service-account.name=gitlab
             kubernetes.io/service-account.uid=bcfe66ac-39be-11e8-97e8-026dce96b6e8

Type:  kubernetes.io/service-account-token

Data
====
ca.crt:     1025 bytes
namespace:  11 bytes
token:      <authentication_token>