OpenShift推送自定义镜像到本地仓库并创建项目和应用

OpenShift推送自定义镜像到本地仓库并创建项目和应用

创建push 权限

#oc create serviceaccount registry -n default
#oc adm policy add-scc-to-user privileged system:serviceaccount:default:registry

为admin帐号授权

#oc adm policy add-role-to-user system:registry admin
#oc adm policy add-role-to-user admin admin -n openshift
#oc adm policy add-role-to-user system:image-builder admin
#oc adm policy add-role-to-user system:image-puller system:anonymous -n openshift

登陆openshift 项目

#oc login -n openshift #使用admin用户登陆openshift
admin/admin
#oc whoami -t #查看admin用户的token

登陆Docker login 私有库（只有登陆成功才能上传）

#docker login -u admin -p qcrV9mq92fH16SpWKHdah3t_qRn0KCZNNlSi-YfDaRc 172.30.60.125:5000

先给镜像打tag

#docker tag nginx:1.11.4-alpine 172.30.60.125:5000/openshift/nginx:1.11.4-alpine

push 镜像到私有仓库

docker push 172.30.60.125:5000/openshift/nginx:1.11.4-alpine

至此会推送成功

使用刚刚推送的image创建app，虽然会报一堆错误，但是能够创建成功

#oc new-app --docker-image=“docker-registry.default.svc:5000/openshift/mybank-tomcat” --allow-missing-images

报错的原因应该是私有镜像仓库没有启用https，加参数–insecure-registry=true绕过证书检查就不会报错了

#oc new-app --docker-image=“docker-registry.default.svc:5000/openshift/mybank-tomcat” --allow-missing-images --insecure-registry=true

使用自主搭建的私有镜像仓库也是可以的

#docker login harbor.ctwifi.cn (输入用户名和密码登陆，所有node节点也要登陆一次)
#oc new-app --docker-image=“harbor.ctwifi.cn/openshift/nginx:1.12” --allow-missing-images --insecure-registry=true

新增registry（我使用本地仓库所以没有使用新增）:

#oc delete dc docker-registry registry-console router

#oc delete svc docker-registry registry-console router

#oc delete serviceaccounts registry router

#mkdir -p /opt/openshift-registry
#chown 1001:root /opt/openshift-registry
#oc create serviceaccount registry -n default
#oc adm policy add-scc-to-user privileged system:serviceaccount:default:registry

#service cluster role binding deployment config

#oc adm registry --service-account=registry --mount-host=/opt/openshift-registry
#oc logs dc/docker-registry