Attachment 15973 Details for Bug 50171 – Шаги воспроизведения

Шаги воспроизведения

file_50171.txt (text/plain), 2.59 KB, created by Artem Varaksa on 2024-04-25 16:41:04 MSK

(hide)

Description:

Filename:

MIME Type:

Creator: Artem Varaksa

Created: 2024-04-25 16:41:04 MSK

Size: 2.59 KB

patch

obsolete

>ÐÐ±ÑÐ°Ñ Ð½Ð°ÑÑÑÐ¾Ð¹ÐºÐ° 3-Ñ ÑÐ¾ÑÑÐ¾Ð²:
>
># uname -r | grep un-def >/dev/null || update-kernel -t un-def -y
># sed -i '/swap/d' /etc/fstab
># hostnamectl set-hostname podsec-master / # hostnamectl set-hostname podsec-controlplane / # hostnamectl set-hostname podsec-worker
># reboot
># apt-get install -y podsec podsec-inotify podsec-k8s podsec-k8s-rbac podsec-dev tree
># export U7S_PLATFORM=k8s-sisyphus U7S_KUBEVERSION=v1.26.11 U7S_SETAVAILABLEIMAGES=yes REPO=sisyphus
>
>ÐÐ°ÑÑÑÐ¾Ð¹ÐºÐ° podsec-master:
>
># podsec-k8s-save-oci out amd64 k8s-${REPO}
># podsec-create-policy IP_1
># podsec-create-services
># podsec-create-imagemakeruser imagemaker
># podsec-create-podmanusers poduser
># cp out/amd64.tar.xz /home/imagemaker/
># chown imagemaker: /home/imagemaker/amd64.tar.xz
># ssh imagemaker@localhost
>$ export REPO=sisyphus
>$ U7S_PLATFORM="k8s-${REPO}" podsec-load-sign-oci amd64.tar.xz amd64 imagemaker@test.ru
># export PATH=/usr/libexec/podsec/u7s/bin/:$PATH && which kubeadm
># U7S_REGISTRY=registry.local kubeadm init --apiserver-advertise-address IP_2
>
>ÐÐ°ÑÑÑÐ¾Ð¹ÐºÐ° podsec-controlplane:
>
># podsec-create-policy IP_1_MASTER
># export PATH=/usr/libexec/podsec/u7s/bin/:$PATH
># export U7S_PLATFORM=k8s-sisyphus U7S_KUBEVERSION=v1.26.11 U7S_SETAVAILABLEIMAGES=yes REPO=sisyphus
># kubeadm join ...:... --token ... --discovery-token-ca-cert-hash sha256:... --control-plane --certificate-key ...
>
>ÐÐ°ÑÑÑÐ¾Ð¹ÐºÐ° podsec-worker:
>
># podsec-create-policy IP_1_MASTER
># export PATH=/usr/libexec/podsec/u7s/bin/:$PATH
># export U7S_PLATFORM=k8s-sisyphus U7S_KUBEVERSION=v1.26.11 U7S_SETAVAILABLEIMAGES=yes REPO=sisyphus
># kubeadm join ...:... --token ...  --discovery-token-ca-cert-hash sha256:...
>
>Ð Ð°Ð·Ð²ÐµÑÑÐºÐ° nginx Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ master:
>
># ssh imagemaker@localhost
>$ podman pull --tls-verify docker.io/library/nginx:1.14.2
>$ podman tag docker.io/library/nginx:1.14.2 registry.local/nginx
>$ podman push --tls-verify=false --sign-by=imagemaker@test.ru registry.local/nginx
># cat > deploy.yaml <<EOF
>apiVersion: apps/v1
>kind: Deployment
>metadata:
>  name: nginx-deployment
>spec:
>  selector:
>    matchLabels:
>      app: nginx
>  replicas: 2
>  template:
>    metadata:
>      labels:
>        app: nginx
>    spec:
>      containers:
>      - name: nginx
>        image: registry.local/nginx
>        ports:
>        - containerPort: 80
>---
>apiVersion: v1
>kind: Service
>metadata:
>  name: nginx
>  labels:
>    app: nginx
>spec:
>  type: NodePort
>  ports:
>  - port: 80
>    targetPort: 80
>  selector:
>    app: nginx
>EOF
>
># kubectl apply -f deploy.yaml
># kubectl get pods -o wide

Actions: View

Attachments on bug 50171: 15973