Kubernetes 集群搭建并运行 Jenkins

安装 kubeadm

➜  apt-get update && apt-get install -y apt-transport-https
➜  curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add -
➜  cat <<EOF >/etc/apt/sources.list.d/kubernetes.list
deb http://apt.kubernetes.io/ kubernetes-xenial main
EOF
➜  apt-get update
➜  apt-get install -y kubelet kubeadm kubectl
修改/etc/systemd/system/kubelet.service.d/10-kubeadm.conf 

在文件开始添加
Environment="KUBELET_EXTRA_ARGS=–fail-swap-on=false”
安装网络

➜  kubectl create -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel-rbac.yml

将 Worker 节点加入集群

➜  sudo kubeadm join 10.10.0.13:6443 --token xyjqbf.xphvws8ql4mesmbx --discovery-token-ca-cert-hash sha256:77b15ae168bf4ac39c7339697372b525c1d7e9466c37a4ac1f71b9bab6d05673  --ignore-preflight-errors Swap

​安装 kubernetes-dashboard
​创建 kubernetes-dashboard-admin 账号

➜  cat <<EOF k8s-dashboard-admin.yaml
---
apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard-admin
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: kubernetes-dashboard-admin
  labels:
    k8s-app: kubernetes-dashboard
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: kubernetes-dashboard-admin
  namespace: kube-system
EOF

➜  kubectl create -f  k8s-dashboard-admin.yaml

​获取 token 登录到 dashboard

参考地址 https://github.com/kubernetes/dashboard/wiki/Accessing-Dashboard—1.7.X-and-above

➜  kubectl -n kube-system get secret
➜  kubectl -n kube-system describe secret kubernetes-dashboard-admin-token-dg6mp

​创建命名空间
➜ kubectl create namespace jenkins
安装 apt install nfs-common
创建Persistence Volume

➜  cat <<EOF pv.yml
apiVersion: v1
kind: PersistentVolume
metadata:
  name: jenkins
spec:
  capacity:
    storage: 800Gi
  accessModes:
    - ReadWriteOnce
  persistentVolumeReclaimPolicy: Recycle
  claimRef:
    namespace: jenkins
    name: jenkins
  nfs:
    path: /volume1/k8s-persistence-volume/jenkins-home
    server: 10.10.0.139
EOF

➜  kubectl create -f pv.yml
​使用 helm 安装 Jenkins
➜  helm install --name jenkins -f values.yaml stable/jenkins
查询安装结果及运行状态
➜  helm status jenkins
➜  kubectl get pv,pvc --namespace jenkins
➜  kubectl get svc --namespace jenkins
➜  printf $(kubectl get secret --namespace jenkins jenkins -o jsonpath="{.data.jenkins-admin-password}" | base64 --decode);echo