K3s v1.26.0-rc.0-k3s1 部署Harbor私库权限配置

在K3s服务端配置

cat >> /etc/rancher/k3s/registries.yaml  <<EOF

mirrors:

  "harbor.baize-k3s.org":

    endpoint:

      - "https://harbor.baize-k3s.org"

configs:

  "harbor.baize-k3s.org":

    auth:

       username: admin

       password: Harbor12345

    tls:

      ca_file: /etc/containerd/harbor.baize-k3s.org/ca.crt

      #insecure_skip_verify: true

EOF

重启k3s服务配置生效

 systemctl restart k3s

查看生效配置

cat /var/lib/rancher/k3s/agent/etc/containerd/config.toml

后四行为新增内容

[plugins."io.containerd.grpc.v1.cri".registry.mirrors]

[plugins."io.containerd.grpc.v1.cri".registry.mirrors."harbor.baize-k3s.org"]

  endpoint = ["https://harbor.baize-k3s.org"]

[plugins."io.containerd.grpc.v1.cri".registry.configs."harbor.baize-k3s.org".auth]

  username = "admin"

  password = "Harbor12345"

[plugins."io.containerd.grpc.v1.cri".registry.configs."harbor.baize-k3s.org".tls]

  ca_file = "/etc/containerd/harbor.baize-k3s.org/ca.crt"

1. 在k3sagent配置
2.  mkdir -p /etc/rancher/k3s

3. cat >> /etc/rancher/k3s/registries.yaml  <<EOF

   mirrors:

     "harbor.baize-k3s.org":

       endpoint:

         - "https://harbor.baize-k3s.org"

   configs:

     "harbor.baize-k3s.org":

       auth:

          username: admin

          password: Harbor12345

       tls:

         ca_file: /etc/containerd/harbor.baize-k3s.org/ca.crt

         #insecure_skip_verify: true

   EOF

重启生效

systemctl restart k3s-agent

查看containerd配置文件

cat /var/lib/rancher/k3s/agent/etc/containerd/config.toml

拉取镜像和查看镜像

crictl pull harbor.baize-k3s.org/library/busybox:latest

crictl images