kubernetes 从私有仓库拉取镜像

当 pod 从私用仓库拉取镜像时，k8s 集群使用类型为 docker-registry 的 Secret 来提供身份认证，创建一个名为 registry-key 的 Secret
如果命名空间中有 secret 先删除：kubectl delete secret registry-key -n delevopment
-n delevopment 为指定命名空间 不写就是 default
新建 secret
kubectl -n delevopment create secret docker-registry registry-key
--docker-server=kvmdocker:5000
--docker-username=gongdear
--docker-password=
--docker-email=gongdear@gmail.com
执行后新建成功
yaml 中配置
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: gateway-dev
namespace: development
labels:
name: gateway-dev
spec:
replicas: 1
template:
metadata:
labels:
name: gateway-dev
spec:
**imagePullSecrets:**
**- name: registry-key**
containers:
- name: gateway-dev
image: kvmdocker:5000/gateway/2.0
imagePullPolicy: Always
ports:
- containerPort: 8118
protocol: TCP
volumeMounts:
- mountPath: /etc/localtime
name: localtime
readOnly: true
- mountPath: /etc/resolv.conf
name: resolv
readOnly: true
resources:
limits:
memory: "1Gi"
cpu: "2"
requests:
memory: "500Mi"
cpu: "1"
volumes:
- hostPath:
path: /etc/localtime
name: localtime
- hostPath:
path: /etc/resolv.conf
name: resolv