png免费素材网站,中国寰球工程公司,2023年的新闻十条,中国建筑网登录入口1#xff0c;基本概念 为了方便管理和集成jenkins#xff0c;k8s、harbor、jenkins均使用openLDAP统一认证。2#xff0c;部署openLDAP 根据之前的文档#xff0c;openLDAP使用GFS进行数据持久化。下载对应的openLDAP文件git clone https://github.com/xiaoqshuo/k8s-clust…1基本概念 为了方便管理和集成jenkinsk8s、harbor、jenkins均使用openLDAP统一认证。2部署openLDAP 根据之前的文档openLDAP使用GFS进行数据持久化。下载对应的openLDAP文件git clone https://github.com/xiaoqshuo/k8s-cluster.git 2.1 创建openLDAP [rootk8s-master01 k8s-cluster]# kubectl apply -f openldap/
deployment.extensions/ldap created
persistentvolumeclaim/openldap-data created
secret/ldap-secret created
service/ldap-service created
deployment.extensions/phpldapadmin created
service/phpldapadmin created 此处参考的是https://github.com/osixia/docker-openldap更新DN可以更改environment下的yaml文件默认的example.org2.2 创建ldap-ui-ingress [rootk8s-master01 openldap]# kubectl create -f traefik-ldap.yaml
ingress.extensions/ldap-ui created[rootk8s-master01 openldap]# cat traefik-ldap.yaml
apiVersion: extensions/v1beta1
kind: Ingress
metadata:name: ldap-uinamespace: public-serviceannotations:kubernetes.io/ingress.class: traefik
spec:rules:- host: ldap.k8s.nethttp:paths:- backend:serviceName: phpldapadminservicePort: 8080 3 查看验证 [rootk8s-master01 openldap]# kubectl get po,svc,pvc -n public-service | grep ldap
pod/ldap-6c9fcc7446-r52r7 1/1 Running 0 4m19s
pod/phpldapadmin-6784bf8db-gxqw2 1/1 Running 0 4m16sservice/glusterfs-dynamic-openldap-data ClusterIP 10.96.177.154 none 1/TCP 3m29s
service/ldap-service ClusterIP 10.111.36.109 none 389/TCP,636/TCP 4m16s
service/phpldapadmin ClusterIP 10.103.142.162 none 8080/TCP 4m11spersistentvolumeclaim/openldap-data Bound pvc-252ac771-01da-11e9-b0c8-000c2927a0d0 1Gi RWX gluster-heketi 4m20s 3.1 访问web 访问phpldapadminldap.k8s.net 登录默认DNcnadmin,dcexample,dcorg默认Passwordadmin(线上系统需自定义修改) 4 添加用户和组 4.1 创建Groups和People OU People OU Groups 4.2 创建组和用户 4.2.1 组 dev devops test 组结果 4.2.2 用户 填写基本信息选择组和Login Shell注意修改Common Name 结果 4.3 为每个用户添加Email没有Email无法登陆gitlab 5配置k8s使用ldap登录 未完待续 参考 https://www.cnblogs.com/dukuan/p/9983899.htmlhttps://github.com/osixia/https://icicimov.github.io/blog/virtualization/Kubernetes-LDAP-Authentication/https://github.com/nginxinc/nginx-ldap-auth.git转载于:https://www.cnblogs.com/xiaoqshuo/p/10132588.html
