1.进入集群配置
点击Manage Jenkins—>Configure System—>云—>新增一个云—>Kubernetes
然后配置如下:
先注意 名称默认为kubernetes,然后 Kubernetes地址 填写https://kubernetes.default.svc.cluster.local,
在Jenkins地址,填入:http://服务名.kube-ops.svc.cluster.local:8080,如下所示:
ca.crt 证书如下:
[root@k8s src]# cat ca.crt
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2.创建密钥证书
3.创建他们:
1. 复制密钥部分 certificate-authority-data: LS0tLS1CRUdJ
echo LS0tLS1CRUdJ | base64 -d > ca.crt
2. 复制密钥部分 client-certificate-data: LS0tLS1CRUdJTiBDRVJ
echo LS0tLS1CRUdJTiBDRVJ | base64 -d > cli.crt
3. 复制部分 client-key-data: LS0tLS1CRUdJTiBSU0E
echo xxxx > | base64 -d > cli.key
4.合并
openssl pkcs12 -export -out cert.pfx -inkey cli.key -in cli.crt -certfile ca.crt
Enter Export Password: <<<------输入密码
Verifying - Enter Export Password: <<<------输入密码
创建凭据 上传刚才合并的密钥证书