containerd 實(shí)現(xiàn)了 kubernetes 的 Container Runtime Interface (CRI) 接口,提供容器運(yùn)行時(shí)核心功能,如鏡像管理、容器管理等,相比 dockerd 更加簡(jiǎn)單、健壯和可移植。
從docker過度還是需要一點(diǎn)時(shí)間慢慢習(xí)慣的,今天來探討containerd 如何從無域名與權(quán)威證書的私有倉庫harbor,下載鏡像!
containerd 不能像docker一樣
docker login harbor.example.com
登錄到鏡像倉庫,無法從harbor拉取到鏡像。
修改Containerd配置文件(基于原始配置文件修改,搜索:registry.auths
快速定位)
vim /etc/containerd/config.toml
- [plugins.“io.containerd.grpc.v1.cri”.registry.mirrors.“docker.io”]:鏡像倉庫源地址
- endpoint = [“https://registry-1.docker.io”]:鏡像倉庫代理地址
- insecure_skip_verify = true:是否跳過安全認(rèn)證
- [plugins.“io.containerd.grpc.v1.cri”.registry.configs.“192.168.100.150:8082”.auth]:私有鏡像倉庫授權(quán)認(rèn)證
- 配置私有鏡像倉庫賬號(hào)密碼后,k8s Pod拉取鏡像無需創(chuàng)建Secrets,Deployment也無需配置Secrets
- 配置文件參考:https://github.com/containerd/containerd/blob/main/docs/cri/registry.md
[plugins."io.containerd.grpc.v1.cri".registry]
config_path = ""
[plugins."io.containerd.grpc.v1.cri".registry.auths]
[plugins."io.containerd.grpc.v1.cri".registry.configs]
[plugins."io.containerd.grpc.v1.cri".registry.configs."192.168.100.150:8082".tls]
insecure_skip_verify = true # 是否跳過安全認(rèn)證
[plugins."io.containerd.grpc.v1.cri".registry.configs."192.168.100.150:8082".auth]
username = "admin"
password = "YOUR_HARBOR_PASSWORD"
[plugins."io.containerd.grpc.v1.cri".registry.headers]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
endpoint = ["https://registry-1.docker.io"]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."192.168.100.150:8082"]
endpoint = ["http://192.168.100.150:8082"]
- 配置生效并重啟Containerd
systemctl daemon-reload && systemctl restart containerd.service
拉取和查看鏡像文章來源:http://www.zghlxwxcb.cn/news/detail-791687.html
ctr -n k8s.io image pull 192.168.100.150:8082/proaim/proaim-trinity-service:RELEASE-1.2.0-fc67c4d5 --plain-http --user admin:YOUR_HARBOR_PASSWORD
ctr -n k8s.io image ls
GitHub:https://github.com/Mystweb文章來源地址http://www.zghlxwxcb.cn/news/detail-791687.html
到了這里,關(guān)于Kubernetes ≥ 1.25 Containerd配置Harbor私有鏡像倉庫的文章就介紹完了。如果您還想了解更多內(nèi)容,請(qǐng)?jiān)谟疑辖撬阉鱐OY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章,希望大家以后多多支持TOY模板網(wǎng)!