CC00381.CloudKubernetes——|KuberNetes&CI/CD.V19|——|Jenkins.v07|Jenkins配置k8s多集群.v01|

一、查看k8s集群的ca.pem值

### --- 查看k8s集群地址

~~~     # 获取k8s集群地址
[root@k8s-master01 spring-cloud-demo]# kubectl cluster-info
Kubernetes control plane is running at https://192.168.1.11:6443 // k8s集群地址
CoreDNS is running at https://192.168.1.11:6443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy

### --- 获取证书的key
~~~     # 获取创建的证书key值

[root@k8s-master01 ~]# cat /etc/kubernetes/pki/ca.pem 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

### --- 创建凭证：生成PKCS文件

~~~     # 在linux下手动生成PKCS12文件
[root@k8s-master01 pki]# openssl pkcs12 -export -out /tmp/default.pfx -inkey admin-key.pem -in admin.pem -certfile ca.pem
Enter Export Password:123456
Verifying - Enter Export Password:123456
[root@k8s-master01 pki]# sz /tmp/default.pfx

~~~     # 生成凭证文件

~~~     Jenkins——>Dashboar——>Credentials——>Global Credentials(Unrestricted)——>
~~~     ——>Add Credentials——>Kind：Certificate——>Scope：Global (Jenkins, nodes, items, all child items, etc)——>
~~~     ——>Certificate： Upload PKCS#12 certificate：选择文件———>选择文件：上传生成的default.pfx文件——>
~~~     ——>Password:123456——>ID：default-cluster——>ok——>END

二、在Jenkins下创建k8s集群

### --- Jenkins下k8s单集群配置

~~~     若是只有一个集群，写完Kubernetes URl地址后，Test Connection——>Save即可，
~~~     但是生产环境中是不可能只有一个集群的

~~~     # Jenkins下k8s单集群配置
~~~     Dashboard——>Manager Jenkins——>Configure System——>Cloud：The cloud configuration has moved to a separate configuration page.——>
~~~     ——>Configure Clouds——>Kubernetes——>Kubernetes Cloiud details——>
~~~     ——>Name：kubernetes-default——>Kubernetes：https://192.168.1.11:6443——>Test Connection——>Save——>END

### --- Jenkins下k8s多集群配置

~~~     首先需要创建一个PKCS格式的证书，就是把服务器的密钥对，实体证书或者中间证书转换成一个文件，
~~~     用这个文件分解成各种证书，

~~~     # Jenkins下配置多个k8s集群
~~~     Dashboard——>Manager Jenkins——>Configure System——>Cloud：The cloud configuration has moved to a separate configuration page.——>
~~~     ——>Configure Clouds——>Kubernetes——>Kubernetes Cloiud details——>
~~~     ——>Name：kubernetes-default——>Kubernetes：https://192.168.1.11:6443——>kubernetes server certificate key：证书的key(准备工作2)——>
~~~     ——>Credentials——>选择秘钥:CN=admin, OU=Kubernetes-manual, O=system:masters, L=Beijing, ST=Beijing, C=CN——>
~~~     ——>Jenkins URL：http://192.168.1.14:28080/——>
~~~     ——>Test Connection：Connection test successful或者Connected to Kubernetes v1.20.6——>
~~~     ——>Save——>END

### --- 开启master和slave通讯端口50000

~~~     # 开启master和slave通讯端口50000
~~~     Dashboard——>Manage Jenkins——>Configure Global Security
~~~     ——>Agents:TCP port inbound agents：Fixed:50000——>
~~~     —>Save——>END

三、Jenkins配置k8s多集群流程

### --- Jenkins配置k8s多集群流程

~~~     Jenkins会调用k8s集群
~~~     创建Pod模板
~~~     执行构建任务