{"id":558,"date":"2020-09-03T11:26:05","date_gmt":"2020-09-03T03:26:05","guid":{"rendered":"https:\/\/blog.espnlol.com\/?p=558"},"modified":"2022-04-20T18:26:08","modified_gmt":"2022-04-20T10:26:08","slug":"helm-%e6%9d%83%e9%99%90%e6%8e%a7%e5%88%b6%e9%99%90%e5%88%b6%e7%ba%a7%e5%88%ab%e5%88%b0namespace","status":"publish","type":"post","link":"https:\/\/blog.espnlol.com\/?p=558","title":{"rendered":"helm \u6743\u9650\u63a7\u5236\u9650\u5236\u7ea7\u522b\u5230namespace"},"content":{"rendered":"\n

helm\u9ed8\u8ba4\u4f1a\u5b89\u88c5\u5230kubeops\uff0c\u6743\u9650\u7ea7\u522b\u4e3acluster-admin\uff0c\u8fd9\u6837\u7684\u6743\u9650\u592a\u5927\u4e86\uff0c\u5728\u5b9e\u9645\u5de5\u4f5c\u4e2d\u4e00\u4e9b\u666e\u901a\u7a0b\u5e8f\u7684\u53d1\u5e03\u5982\u679c\u90fd\u96c6\u4e2d\u5728\u9ed8\u8ba4\u7684tiller\u4e0a\u4f1a\u9020\u6210\u4e0d\u597d\u7ba1\u7406\uff0c\u4ee5\u53ca\u65e0\u6cd5\u653e\u5fc3\u7684\u91ca\u653e\u6743\u9650\u3002\u5982\u679c\u60f3\u66f4\u5408\u7406\u7684\u5206\u914d\u5c31\u9700\u8981\u4e00\u4e2a\u597d\u7684\u6743\u9650\u63a7\u5236\u53ca\u89c4\u5212<\/p>\n\n\n\n

1\uff0c\u9996\u5148\u5728k8s\u4e2d\u521b\u5efa\u4ec5\u9650\u4e8e\u7a7a\u95f4\u6240\u6709\u6743\u7684\u8d26\u53f7<\/p>\n\n\n\n

kubectl create serviceaccount helm-bmsk-admin -n bmsk\nkubectl create rolebinding helm-bmsk-admin --clusterrole=cluster-admin --serviceaccount=bmsk:helm-bmsk-admin -n bmsk<\/pre>\n\n\n\n
2\uff0c\u751f\u6210kubeconfig\u6743\u9650\u6587\u4ef6<\/p>\n\n\n\n
kubectl config set-cluster kubernetes \\\n--certificate-authority=\/etc\/kubernetes\/ca.crt \\\n--embed-certs=true \\\n--server=https:\/\/10.88.10.17:60002 \\\n--kubeconfig=.\/helm-bmsk-admin.kubeconfig\n\n# \u8bbe\u7f6e\u5ba2\u6237\u7aef\u8ba4\u8bc1\u53c2\u6570\n ADMIN_TOKEN=$(kubectl get secret helm-bmsk-admin-token-jpgzq -n bmsk -o jsonpath={.data.token} |base64 -d)\n kubectl config set-credentials helm-bmsk-admin \\\n --token=${ADMIN_TOKEN}\\\n --namespace=bmsk \\\n --kubeconfig=.\/helm-bmsk-admin.kubeconfig\n\n# \u8bbe\u7f6e\u4e0a\u4e0b\u6587\u53c2\u6570\nkubectl config set-context helm-bmsk-admin \\\n--cluster=kubernetes \\\n--user=helm-bmsk-admin \\\n--namespace=bmsk \\\n--kubeconfig=.\/helm-bmsk-admin.kubeconfig\n\n# \u8bbe\u7f6e\u9ed8\u8ba4\u4e0a\u4e0b\u6587\nkubectl config use-context helm-bmsk-admin --kubeconfig=.\/helm-bmsk-admin.kubeconfig --namespace=bmsk<\/pre>\n\n\n\n
3\uff0c\u7ecf\u8fc7\u4e0a\u9762\u64cd\u4f5c\u4f1a\u751f\u6210\u4e00\u4e2ahelm-bmsk-admin.kubeconfig\u79d8\u94a5\uff0c\u901a\u8fc7\u8fd9\u4e2a\u79d8\u94a5\u6211\u4eec\u53ef\u4ee5\u62e5\u6709bmsk\u8fd9\u4e2a\u7a7a\u95f4\u7684\u6240\u6709\u6743\u9650\uff0c\u4e0b\u9762\u9700\u8981bmsk\u7a7a\u95f4\u53d1\u5e03\u4e00\u4e2atiller\u7528\u4e8ehelm\u4e0e\u4e4b\u901a\u4fe1<\/p>\n\n\n\n
\u901a\u8fc7\u62e5\u6709cluster_admin\u6743\u9650\u7684helm\uff0c\u5728bmsk\u7a7a\u95f4\u521d\u59cb\u5316\u4e00\u4e2atiller\u8981\u6307\u5b9a\u5176\u6743\u9650\nhelm init --service-account helm-bmsk-admin --kubeconfig \/root\/manifests\/role\/helm\/helm-bmsk-admin.kubeconfig --tiller-namespace=bmsk --upgrade --tiller-image=hub.corp.bm-sk.cn\/k8s\/tiller:v2.10.0<\/pre>\n\n\n\n
4\uff0c\u5728client\u7aef\u521d\u59cb\u5316helm<\/p>\n\n\n\n
helm init --client-only --stable-repo-url http:\/\/mirror.azure.cn\/kubernetes\/charts\/<\/pre>\n\n\n\n
5\uff0c\u901a\u8fc7\u6307\u5b9a\u79d8\u94a5+\u547d\u4ee4\u884c\u83b7\u53d6\u5f53\u524d\u7a7a\u95f4\u7684releases project<\/p>\n\n\n\n
[root@bmsk-manage-jenkins-578f5d8bb4-tsr5c \/]# helm --kubeconfig \/mnt\/helm-bmsk-admin.kubeconfig --tiller-namespace bmsk list\nNAME            REVISION        UPDATED                         STATUS          CHART           APP VERSION     NAMESPACE\np-bmsk-cas      13              Thu Aug 13 14:26:33 2020        DEPLOYED        deploy-1.0.3    1.0             bmsk     \np-bmsk-qywx     7               Mon Jun  8 13:31:06 2020        DEPLOYED        deploy-1.0.3    1.0             bmsk     \np-bmsk-z        51              Wed Sep  2 10:47:00 2020        DEPLOYED        deploy-1.0.3    1.0             bmsk     <\/pre>\n","protected":false},"excerpt":{"rendered":"
helm\u9ed8\u8ba4\u4f1a\u5b89\u88c5\u5230kubeops\uff0c\u6743\u9650\u7ea7\u522b\u4e3acluster-admin\uff0c\u8fd9\u6837\u7684 … \u7ee7\u7eed\u9605\u8bfb →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-558","post","type-post","status-publish","format-standard","hentry","category-k8s"],"_links":{"self":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=558"}],"version-history":[{"count":1,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/558\/revisions"}],"predecessor-version":[{"id":559,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/558\/revisions\/559"}],"wp:attachment":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}