1,基本概念
为了方便管理和集成jenkins,k8s、harbor、jenkins均使用openLDAP统一认证。
2,部署openLDAP
根据之前的文档,openLDAP使用GFS进行数据持久化。
下载对应的openLDAP文件
git clone https://github.com/xiaoqshuo/k8s-cluster.git
2.1 创建openLDAP
[root@k8s-master01 k8s-cluster]# kubectl apply -f openldap/
deployment.extensions/ldap created
persistentvolumeclaim/openldap-data created
secret/ldap-secret created
service/ldap-service created
deployment.extensions/phpldapadmin created
service/phpldapadmin created
2.2 创建ldap-ui-ingress
[root@k8s-master01 openldap]# kubectl create -f traefik-ldap.yaml
ingress.extensions/ldap-ui created
[root@k8s-master01 openldap]# cat traefik-ldap.yaml
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: ldap-ui
namespace: public-service