[Gitops--1]GitOps环境准备

GitOps环境准备

1. 主机规划

序号	主机名	主机ip	主机功能	软件
1	dev	192.168.31.1	开发者 项目代码 apidemo	git,golang,goland
2	gitlab	192.168.31.14	代码仓库,CI操作	git-lab,git,golang,docker,gitlab-runner
3	harbor	192.168.31.104	管理和存储镜像	docker,docker-compose,harbor
4	k8s-master	192.168.31.41	k8s-master	k8s,ArgoCd
5	k8s-node1	192.168.31.51	k8s-worker	k8s,ArgoCd
6	k8s-node2	192.168.31.52	k8s-worker	k8s,ArgoCd

2. 安装Gitlab

2.1 配置Gitlab-ce源

curl https://packages.gitlab.com/gpg.key 2> /dev/null | sudo apt-key add - &>/dev/null
echo "deb https://mirrors.tuna.tsinghua.edu.cn/gitlab-ce/ubuntu bionic main" >> /etc/apt/source.list

2.2 安装Gitlab-ce

apt-get install gitlab-ce

2.3 修改配置文件

vi /etc/gitlab/gitlab.rb

修改32行

external_url 'http://192.168.31.14'

2.4 启动Gitlab-ce

gitlab-ctl reconfigure

查看运行状态

gitlab-ctl status

2.5 访问Gitlab-ce

http://192.168.31.14

2.6 Gitlab登录密码

第一次登陆gitlab用户名是root,密码在/etc/gitlab/initial_root_password文件中

cat /etc/gitlab/initial_root_password
# WARNING: This value is valid only in the following conditions
#          1. If provided manually (either via `GITLAB_ROOT_PASSWORD` environment variable or via `gitlab_rails['initial_root_password']` setting in `gitlab.rb`, it was provided before database was seeded for the first time (usually, the first reconfigure run).
#          2. Password hasn't been changed manually, either via UI or via command line.
#
#          If the password shown here doesn't work, you must reset the admin password following https://docs.gitlab.com/ee/security/reset_user_password.html#reset-your-root-password.

Password: PPXMp+5t/Wlv1UJD0ERSFzpud0YH1CTDxRoqnAAfU3o=

# NOTE: This file will be automatically deleted in the first reconfigure run after 24 hours.

2.7 密码修改

3. 安装go

3.1 安装go

golan镜像地址

https://mirrors.aliyun.com/golang/?spm=a2c6h.13651104.0.0.288b1e579O2M3R

下载

wget https://mirrors.aliyun.com/golang/go1.20.linux-amd64.tar.gz
tar xf go1.20.linux-amd64.tar.gz -C /usr/local/
mkdir -p /usr/local/go/gopath/{src,bin,pkg}
chmod -R 757 /usr/local/go/gopath
ln -sf /usr/local/go/bin/go /usr/bin/go

3.2 环境变量

在/etc/profile追加以下内容

export GOROOT="/usr/local/go"
export GOPATH="/usr/local/go/gopath"
export GOBIN="$GOROOT/bin"
export PATH=$PATH:$GOBIN

加载环境变量

source /etc/profile

3.3 配置GO环境变量

go env -w GOPROXY=http://goproxy.cn
go env -w GO111MODULE=on

4. 安装Docker-ce

# step 1: 安装必要的一些系统工具
sudo apt-get update
sudo apt-get -y install apt-transport-https ca-certificates curl software-properties-common
# step 2: 安装GPG证书
curl -fsSL https://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg | sudo apt-key add -
# Step 3: 写入软件源信息
sudo add-apt-repository "deb [arch=amd64] https://mirrors.aliyun.com/docker-ce/linux/ubuntu $(lsb_release -cs) stable"
# Step 4: 更新并安装Docker-CE
sudo apt-get -y update
sudo apt-get -y install docker-ce

5. 部署metallb

需要给 MetalLB 分配一段 IP，接着它会根据 service 中的相关配置来给LoadBalancer的服务分配IP，LoadBalancer的IP可以手动指定，也可以让MetalLB自动分配；同时还可以在 MetalLB 的configmap中配置多个 IP 段，并且单独设置每个 IP 段是否开启自动分配。

地址分配（address allocation）主要就是由作为 deployment 部署的 controller 来实现，它负责监听集群中的 service 状态并且分配 IP。

# cat namespace.yaml
apiVersion: v1
kind: Namespace
metadata:
  name: metallb-system
  labels:
    app: metallb
# kubectl apply -f metallb.yaml
podsecuritypolicy.policy/controller created
podsecuritypolicy.policy/speaker created
serviceaccount/controller created
serviceaccount/speaker created
clusterrole.rbac.authorization.k8s.io/metallb-system:controller created
clusterrole.rbac.authorization.k8s.io/metallb-system:speaker created
role.rbac.authorization.k8s.io/config-watcher created
role.rbac.authorization.k8s.io/pod-lister created
role.rbac.authorization.k8s.io/controller created
clusterrolebinding.rbac.authorization.k8s.io/metallb-system:controller created
clusterrolebinding.rbac.authorization.k8s.io/metallb-system:speaker created
rolebinding.rbac.authorization.k8s.io/config-watcher created
rolebinding.rbac.authorization.k8s.io/pod-lister created
rolebinding.rbac.authorization.k8s.io/controller created
daemonset.apps/speaker created
deployment.apps/controller created

创建configmap

# cat metallb-conf.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  namespace: metallb-system
  name: config
data:
  config: |
    address-pools:
    - name: default
      protocol: layer2
      addresses:
      - 192.168.31.230-192.168.31.240
root@master-01:~/metallb/metallb-0.12.1/manifests# kubectl apply -f metallb-conf.yaml
configmap/config created

ingress

#365行
  # 把type改为LoadBalancer
  type: LoadBalancer

# kubectl apply -f ingress-deploy.yaml