Containerd对接Harbor拉取与上传镜像

Containerd对接Harbor拉取与上传镜像

本文将介绍在Kubernetes中使用containerd作为容器运行时如何去通过harbor拉取与上传镜像，在已有的harbor环境下，如何配置containerd去拉取harbor镜像

1.创建存放证书与配置文件目录，生成containerd所需配置文件，在harbor节点将用到的证书copy到指定目录，我这里所有的是/etc/containerd/certs.d/registry.harbor.com/

mkdir -p /etc/containerd/certs.d/registry.harbor.com/containerd config default > /etc/containerd/config.toml

2.修改containerd配置文件 /etc/containerd/config.toml

......上面的配置略多，没有粘，只拿了下面有用部分 [plugins."io.containerd.grpc.v1.cri".registry] [plugins."io.containerd.grpc.v1.cri".registry.mirrors] [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"] endpoint = [" [plugins."io.containerd.grpc.v1.cri".registry.mirrors."registry.harbor.com"] #从这里开始添加，根据自己的环境，我这里harbor域名为 registry.harbor.com endpoint = [" [plugins."io.containerd.grpc.v1.cri".registry.configs] [plugins."io.containerd.grpc.v1.cri".registry.configs."registry.harbor.com".tls] insecure_skip_verify = true #跳过认证 ca_file = "/etc/containerd/certs.d/registry.harbor.com/ca.crt" #ca证书 cert_file = "/etc/containerd/certs.d/registry.harbor.com/registry.harbor.com.cert" #harbor证书 key_file = "/etc/containerd/certs.d/registry.harbor.com/registry.harbor.com.key" #密钥 [plugins."io.containerd.grpc.v1.cri".registry.configs."registry.harbor.com".auth] username = "admin" #harbor用户名 password = "Harbor12345" #harbor密码 配置截至到这里 [plugins."io.containerd.grpc.v1.cri".x509_key_pair_streaming] tls_cert_file = "" tls_key_file = "" [plugins."io.containerd.internal.v1.opt"] path = "/opt/containerd" [plugins."io.containerd.internal.v1.restart"] interval = "10s" [plugins."io.containerd.metadata.v1.bolt"] content_sharing_policy = "shared" [plugins."io.containerd.monitor.v1.cgroups"] no_prometheus = false [plugins."io.containerd.runtime.v1.linux"] shim = "containerd-shim" runtime = "runc" runtime_root = "" no_shim = false shim_debug = false [plugins."io.containerd.runtime.v2.task"] platforms = ["linux/amd64"] [plugins."io.containerd.service.v1.diff-service"] default = ["walking"] [plugins."io.containerd.snapshotter.v1.devmapper"] root_path = "" pool_name = "" base_image_size = ""

3.重启containerd

systemctl daemon-reloadsystemctl restart containerd

4.push镜像，这里push使用ctr命令

ctr --namespace=k8s.io images push registry.harbor.com/test/app:latest --skip-verify --user admin:Harbor12345 # --namespace=k8s.io 指定命名空间，不是必须，根据环境而定# --skip-verify 跳过认证# --user 指定harbor用户名及密码

5.pull镜像

crictl pull registry.harbor.com/test/app:latest

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。