Kuphwanya gulu la Kubernetes pogwiritsa ntchito Helm v2 tiller

Helm ndi woyang'anira phukusi la Kubernetes, monga apt-get za Ubuntu. M'cholemba ichi tiwona mtundu wakale wa helm (v2) wokhala ndi ntchito yolima yomwe idayikidwa mwachisawawa, momwe titha kufikira tsango.

Tiyeni tikonzekere masango; kuti tichite izi, yendetsani lamulo:

kubectl run --rm --restart=Never -it --image=madhuakula/k8s-goat-helm-tiller -- bash

Chiwonetsero

• Ngati simukonza china chilichonse, helm v2 imayamba ntchito yolima, yomwe ili ndi RBAC yokhala ndi ufulu wowongolera magulu onse.
• Pambuyo kukhazikitsa mu namespace kube-system akuwonekera tiller-deploy, ndikutsegulanso doko 44134, lomangidwa ku 0.0.0.0. Izi zitha kuwonedwa pogwiritsa ntchito telnet.

$ telnet tiller-deploy.kube-system 44134

• Tsopano mutha kulumikizana ndi ntchito yolima. Tidzagwiritsa ntchito helm binary kuchita ntchito polumikizana ndi tiller service:

$ helm --host tiller-deploy.kube-system:44134 version

• Tiyeni tiyese kupeza zinsinsi za gulu la Kubernetes kuchokera ku namespace kube-system:

$ kubectl get secrets -n kube-system

• Tsopano titha kupanga tchati chathu, momwe tingapangire gawo ndi ufulu wa oyang'anira ndikugawira gawoli ku akaunti yosasinthika. Pogwiritsa ntchito chizindikiro chochokera muakaunti yautumikiyi, talandira mwayi wokwanira kugulu lathu.

$ helm --host tiller-deploy.kube-system:44134 install /pwnchart

• Tsopano liti pwnchart kuyikidwa, akaunti yautumiki wokhazikika ili ndi mwayi wowongolera. Tiyeni tionenso momwe tingapezere zinsinsi kuchokera kube-system

kubectl get secrets -n kube-system

Kuchita bwino kwa script iyi kumadalira momwe tiller inatumizidwa; nthawi zina olamulira amayiyika mu malo osiyana ndi maudindo osiyanasiyana. Helm 3 sikhala pachiwopsezo chotere chifukwa ... mulibe wolima mmenemo.

Ndemanga ya womasulira: Kugwiritsa ntchito ndondomeko za netiweki kusefa kuchuluka kwa magalimoto mumagulu kumathandiza kuteteza ku zovuta zamtunduwu.

Source: www.habr.com