\n\u57fa\u4e8e\u8bc1\u4e66\u7684Kubernetes\u96c6\u6210\uff08\u5df2\u5e9f\u5f03\uff09
\nhttps:\/\/docs.gitlab.com\/ee\/user\/infrastructure\/clusters\/#certificate-based-kubernetes-integration-deprecated<\/div>\n
\u8bf7\u5728\u4ee5\u540e\u4f7f\u7528GitLab Kubernetes\u7684\u4ee3\u7406\u7a0b\u5e8f\u3002
\n\u6709\u5173\u4f7f\u7528\u65b9\u6cd5\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b\u6587\u7ae0\uff1a
\n\u5c1d\u8bd5\u4f7f\u7528GitLab Kubernetes\u4ee3\u7406\u7a0b\u5e8f\uff08\u4e4b\u524d\u79f0\u4e3aGitLab Agent for Kubernetes\uff09- Qiita
\nhttps:\/\/qiita.com\/ynott\/items\/35e9492d0681ea8ac60a<\/div>\n![\"image.png\"](\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d274337434c4406c3b85a\/5-0.png\" "\\"\\"")
<\/div>\n\u5728\u540e\u534a\u90e8\u5206\uff0c\u6211\u4eec\u5c06\u4f1a\u4ecb\u7ecd\u5982\u4f55\u5c06MicroK8s\u8fde\u63a5\u5230\u672c\u5730\u7684GitLab\uff0c\u5e76\u4f53\u9a8cGitLab\u7684\u81ea\u52a8DevOps\u529f\u80fd\u3002<\/h1>\n
2. \u8fd0\u884cMicroK8s\u3002<\/h1>\n
\n\u6709\u5173\u4f7f\u7528\u65b9\u6cd5\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b\u6587\u7ae0\uff1a
\n\u5c1d\u8bd5\u4f7f\u7528GitLab Kubernetes\u4ee3\u7406\u7a0b\u5e8f\uff08\u4e4b\u524d\u79f0\u4e3aGitLab Agent for Kubernetes\uff09- Qiita
\nhttps:\/\/qiita.com\/ynott\/items\/35e9492d0681ea8ac60a<\/div>\n
\u9996\u5148<\/h1>\n
GitLab\u63d0\u4f9b\u4e86\u4e0eKubernetes\u96c6\u6210\u7684\u529f\u80fd\uff0c\u53ef\u4ee5\u65b9\u4fbf\u5730\u8fdb\u884c\u5404\u79cd\u64cd\u4f5c\u3002<\/p>\n
<\/div>\nKubernetes \u96c6\u7fa4 | GitLab
\nhttps:\/\/docs.gitlab.com\/ee\/user\/project\/clusters\/<\/p>\n
\u4f46\u662f\uff0c\u5b58\u5728\u4e00\u4e2a\u95ee\u9898\u3002\u65e0\u8bba\u662f\u9009\u62e9GKE\u8fd8\u662fEKS\uff0c\u90fd\u9700\u8981\u76f8\u5f53\u9ad8\u7684\u8d39\u7528\u3002
\n\u4f5c\u4e3a\u4e00\u4e2a\u4ec5\u7528\u4e8e\u90e8\u7f72\u5e94\u7528\u7a0b\u5e8f\u7684\u73af\u5883\u6765\u8bf4\uff0c\u5b83\u7684\u8d39\u7528\u662f\u6602\u8d35\u7684\u3002
\n\u7136\u800c\uff0c\u8981\u771f\u6b63\u5efa\u7acbKubernetes\u4e5f\u662f\u5f88\u56f0\u96be\u7684\u3002\u3002\u3002\u3002<\/p>\n
\u56e0\u6b64\uff0c\u6211\u4eec\u5c06\u5728\u865a\u62df\u673a\u4e0a\u8fd0\u884cMicroK8s\uff0c\u5e76\u5c06\u5176\u4e0e\u672c\u5730\u7684GitLab\u8fdb\u884c\u96c6\u6210\u3002<\/p>\n
\u56e0\u4e3a\u7bc7\u5e45\u8f83\u957f\uff0c\u6240\u4ee5\u6211\u5c06\u5176\u5206\u4e3a\u524d\u534a\u548c\u540e\u534a\u3002\u540e\u534a\u5728\u8fd9\u91cc\u3002<\/p>\n
\u5728\u540e\u534a\u90e8\u5206\uff0c\u6211\u4eec\u5c06\u4f1a\u4ecb\u7ecd\u5982\u4f55\u5c06MicroK8s\u8fde\u63a5\u5230\u672c\u5730\u7684GitLab\uff0c\u5e76\u4f53\u9a8cGitLab\u7684\u81ea\u52a8DevOps\u529f\u80fd\u3002<\/h1>\n1. \u5728VMware\u4e0a\u542f\u52a8\u865a\u62df\u673a\u3002<\/h1>\n
\u968f\u4fbf\u9009\u62e9\u4e00\u4e2a medium \u5b9e\u4f8b\u8fd0\u884c\u3002
\n\u8d44\u6e90\u914d\u7f6e\u662f\uff1aCPU\uff1a4\u6838\uff0c\u5185\u5b58\uff1a4GB\u3002
\n\u64cd\u4f5c\u7cfb\u7edf\u9009\u62e9 Ubuntu 18.04 LTS\u3002<\/p>\n
2. \u8fd0\u884cMicroK8s\u3002<\/h1>\n\u5b89\u88c5 MicroK8s<\/h2>\nsudo <\/span>update &&<\/span> sudo <\/span>upgrade -y<\/span> &&<\/span> sudo <\/span>reboot\r\nsudo install <\/span>snap &&<\/span> sudo <\/span>snap install <\/span>microk8s --classic<\/span>\r\nsudo <\/span>usermod -a<\/span> -G<\/span> microk8s \uff1c\u30e6\u30fc\u30b6\u30fc\u540d\uff1e\r\n<\/code><\/pre>\n2-2. \u786e\u8ba4MicroK8s\u7684\u542f\u52a8\u72b6\u6001\u3002<\/h2>\n$ <\/span>microk8s.status\r\nmicrok8s is running\r\nhigh-availability: no\r\n datastore master nodes: 127.0.0.1:19001\r\n datastore standby nodes: none\r\naddons:\r\n enabled:\r\n ha-cluster # Configure high availability on the current node<\/span>\r\n disabled:\r\n ambassador # Ambassador API Gateway and Ingress<\/span>\r\n cilium # SDN, fast with full network policy<\/span>\r\n dashboard # The Kubernetes dashboard<\/span>\r\n dns # CoreDNS<\/span>\r\n fluentd # Elasticsearch-Fluentd-Kibana logging and monitoring<\/span>\r\n gpu # Automatic enablement of Nvidia CUDA<\/span>\r\n helm # Helm 2 - the package manager for Kubernetes<\/span>\r\n helm3 # Helm 3 - Kubernetes package manager<\/span>\r\n host-access # Allow Pods connecting to Host services smoothly<\/span>\r\n ingress # Ingress controller for external access<\/span>\r\n istio # Core Istio service mesh services<\/span>\r\n jaeger # Kubernetes Jaeger operator with its simple config<\/span>\r\n keda # Kubernetes-based Event Driven Autoscaling<\/span>\r\n knative # The Knative framework on Kubernetes.<\/span>\r\n kubeflow # Kubeflow for easy ML deployments<\/span>\r\n linkerd # Linkerd is a service mesh for Kubernetes and other frameworks<\/span>\r\n rbac # Role-Based Access Control for authorisation<\/span>\r\n storage # Storage class; allocates storage from host directory<\/span>\r\n metallb # Loadbalancer for your Kubernetes cluster<\/span>\r\n metrics-server # K8s Metrics Server for API access to service metrics<\/span>\r\n multus # Multus CNI enables attaching multiple network interfaces to pods<\/span>\r\n portainer # Portainer UI for your Kubernetes cluster<\/span>\r\n prometheus # Prometheus operator for monitoring and logging<\/span>\r\n registry # Private image registry exposed on localhost:32000<\/span>\r\n traefik # traefik Ingress controller for external access<\/span>\r\n<\/code><\/pre>\n\u7528kubectl\u786e\u8ba4\u662f\u5426\u53ef\u4ee5\u83b7\u53d6\u8282\u70b9<\/p>\n
$ microk8s.kubectl get nodes\r\nNAME STATUS ROLES AGE VERSION\r\nip-10-x-y-z Ready <none> 48m v1.17.0\r\n<\/code><\/pre>\n\u8fd0\u884cmicrok8s\u7684addon\u3002<\/h2>\n
\u4ee5\u4e0b\u662f\u9700\u8981\u7684\u5fc5\u8981\u63d2\u4ef6\u3002
\n\u7531GitLab\u65b9\u9762\u5b89\u88c5Ingress\u7b49\uff0c\u56e0\u6b64\u63d2\u4ef6\u53ef\u4ee5\u6700\u7b80\u5316\u3002
\n\u6211\u8ba4\u4e3aDashboard\u4e4b\u7c7b\u7684\u6ca1\u6709\u95ee\u9898\u3002<\/p>\n
\n- \n
rbac \u89d2\u8272\u57fa\u4e8e\u7684\u8bbf\u95ee\u63a7\u5236<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\n- \n
DNS \u57df\u540d\u7cfb\u7edf<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\n- \n
\u5b58\u50a8<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
MetalLB<\/ol>\n\u542f\u7528RBAC\u3001DNS\u548c\u5b58\u50a8\u3002<\/h3>\n
RBAC\u548cDNS\u662f\u9ed8\u8ba4\u5fc5\u9700\u7684\u3002
\n\u5b58\u50a8\u662f\u4e3a\u9700\u8981PV\u7684\u5e94\u7528\u7a0b\u5e8f\u800c\u5fc5\u9700\u7684\u3002<\/p>\n
$ <\/span>sudo <\/span>microk8s.enable rbac\r\n$ <\/span>sudo <\/span>microk8s.enable dns storage\r\n<\/code><\/pre>\n2-3-2. metallb (\u91d1\u5c5e\u8d1f\u8f7d\u5747\u8861).<\/h3>\n
\u8bf7\u5728\u542f\u7528\u65f6\u4f7f\u7528a.b.c.d-a.b.c.e\u7684\u683c\u5f0f\u6307\u5b9a\u53ef\u4ee5\u4f7f\u7528\u7684IP\u5730\u5740\uff0cMetallb\u662f\u4e3aIngress\u4f7f\u7528\u7684LoadBalancer\u6240\u5fc5\u9700\u7684\u3002<\/p>\n
$ sudo microk8s.enable metallb\r\nEnabling MetalLB\r\nEnter each IP address range delimited by comma (e.g. '10.64.140.43-10.64.140.49,192.168.0.105-192.168.0.111'): 192.168.10.20-192.168.10.30\r\nApplying Metallb manifest\r\nnamespace\/metallb-system created\r\nsecret\/memberlist created\r\npodsecuritypolicy.policy\/controller created\r\npodsecuritypolicy.policy\/speaker created\r\nserviceaccount\/controller created\r\nserviceaccount\/speaker created\r\nclusterrole.rbac.authorization.k8s.io\/metallb-system:controller created\r\nclusterrole.rbac.authorization.k8s.io\/metallb-system:speaker created\r\nrole.rbac.authorization.k8s.io\/config-watcher created\r\nrole.rbac.authorization.k8s.io\/pod-lister created\r\nclusterrolebinding.rbac.authorization.k8s.io\/metallb-system:controller created\r\nclusterrolebinding.rbac.authorization.k8s.io\/metallb-system:speaker created\r\nrolebinding.rbac.authorization.k8s.io\/config-watcher created\r\nrolebinding.rbac.authorization.k8s.io\/pod-lister created\r\ndaemonset.apps\/speaker created\r\ndeployment.apps\/controller created\r\nconfigmap\/config created\r\nMetalLB is enabled\r\n<\/code><\/pre>\n\u786e\u8ba4\u63d2\u4ef6\u662f\u5426\u5df2\u542f\u7528\u3002<\/h3>\n$ <\/span>microk8s.status\r\nmicrok8s is running\r\nhigh-availability: no\r\n datastore master nodes: 127.0.0.1:19001\r\n datastore standby nodes: none\r\naddons:\r\n enabled:\r\n dns # CoreDNS<\/span>\r\n ha-cluster # Configure high availability on the current node<\/span>\r\n metallb # Loadbalancer for your Kubernetes cluster<\/span>\r\n rbac # Role-Based Access Control for authorisation<\/span>\r\n storage # Storage class; allocates storage from host directory<\/span>\r\n<\u4ee5\u4e0b\u7565>\r\n<\/code><\/pre>\n2-5. (\u9009\u9879) \u4fee\u6539CoreDNS<\/h2>\n
\u4e3a\u4e86\u83b7\u53d6\u516c\u53f8\u5185\u90e8\u7684\u672c\u5730GitLab\u7684IP\u5730\u5740\uff0c\u6211\u60f3\u4ece\u516c\u53f8\u5185\u90e8DNS\u83b7\u53d6\u5b83\uff0c\u6240\u4ee5\u6211\u6539\u53d8\u4e86DNS\u670d\u52a1\u5668\u7684\u5f15\u7528\u5730\u5740\u3002<\/p>\n
$ <\/span>kubectl edit configmaps coredns -n<\/span> kube-system -o<\/span> yaml\r\n<\/code><\/pre>\n\u867d\u7136\u4e0d\u592a\u4f18\u96c5\uff0c\u4f46\u6211\u76f4\u63a5\u91cd\u65b0\u5199\u4e86\u4e00\u904d\u3002<\/p>\n
data:\r\n Corefile: \".:53 {\\n errors\\n health {\\n lameduck 5s\\n }\\n ready\\n\r\n \\ log . {\\n class error\\n }\\n kubernetes cluster.local in-addr.arpa\r\n ip6.arpa {\\n pods insecure\\n fallthrough in-addr.arpa ip6.arpa\\n }\\n\r\n \\ prometheus :9153\\n forward . <\u793e\u5185DNS\u30b5\u30fc\u30d0\u30fc> \\n cache 30\\n loop\\n reload\\n\r\n \\ loadbalance\\n}\\n\"\r\n<\/code><\/pre>\n\u8ba9\u6211\u4eec\u4ee5\u4ee5\u4e0b\u65b9\u5f0f\u786e\u8ba4\u662f\u5426\u53ef\u4ee5\u89e3\u6790DNS\u3002<\/p>\n
$ <\/span>kubectl run busybox --restart<\/span>=<\/span>Never --image<\/span>=<\/span>busybox:1.28 --<\/span> sleep <\/span>3600\r\n$ <\/span>kubectl exec <\/span>busybox --<\/span> nslookup <\u30aa\u30f3\u30d7\u30ecGitLab FQDN>\r\n<\/code><\/pre>\n2-6. \uff08\u9009\u9879\uff09\u901a\u8fc7 kubectl \u4ece\u5916\u90e8\u8fde\u63a5\u5e76\u83b7\u53d6\u914d\u7f6e<\/h2>\n
\u4e0d\u662f\u5fc5\u9700\u7684\uff0c\u8981\u4eceGitLab\u8fdb\u884c\u8fde\u63a5\u3002<\/p>\n
\u83b7\u53d6kubeconfig\u3002<\/p>\n
$ microk8s.config | tee gitlab-microk8s.config\r\napiVersion: v1\r\nclusters:\r\n- cluster:\r\n certificate-authority-data: LS0tLS1CRUdJxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\r\n server: https:\/\/10.x.y.z:16443\r\n name: microk8s-cluster\r\ncontexts:\r\n- context:\r\n cluster: microk8s-cluster\r\n user: admin\r\n name: microk8s\r\ncurrent-context: microk8s\r\nkind: Config\r\npreferences: {}\r\nusers:\r\n- name: admin\r\n user:\r\n username: admin\r\n password: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\r\n<\/code><\/pre>\n\u83b7\u53d6\u4e0eGitLab\u96c6\u6210\u6240\u9700\u7684\u4fe1\u606f\u3002<\/h1>\n
\u8981\u4e0eGitLab\u8fdb\u884c\u534f\u4f5c\uff0c\u9700\u8981\u4ee5\u4e0b\u4fe1\u606f\u3002<\/p>\n
\n- \n
API\u7f51\u5740<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\n- \n
CA\u8bc1\u4e66<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\n- \n
\u670d\u52a1\u4ee4\u724c<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\u8bf7\u5206\u522b\u83b7\u53d6\u3002<\/ol>\n3-1. API\u7f51\u5740<\/h2>\n
\u4ee5\u4e0b\u662f\u5bf92-6\u4e2d\u83b7\u53d6\u7684kubeconfig\u7684server\u90e8\u5206\u8fdb\u884c\u6c49\u8bed\u7ffb\u8bd1\u7684\u4e00\u79cd\u53ef\u80fd\u9009\u9879\uff1a
\nkubeconfig\u4e2d\u83b7\u53d6\u7684server\u90e8\u5206\u4e3ahttps:\/\/10.x.y.z:16443\u7684https:\/\/10.x.y.z:16443\u90e8\u5206\u3002<\/p>\n
3-2. CA\u8bc1\u4e66 – CA\u8bc1\u4e66<\/h2>\n
\u4ecekubectl get secrets\u547d\u4ee4\u7684default-token\u4e2d\u83b7\u53d6\u8bc1\u4e66\u3002<\/p>\n
$ kubectl get secrets\r\nNAME TYPE DATA AGE\r\ndefault-token-78r9t kubernetes.io\/service-account-token 3 46h\r\n<\/code><\/pre>\n\u4ece\u9ed8\u8ba4\u4ee4\u724c”78r9t”\u83b7\u53d6\u8bc1\u4e66\u3002<\/p>\n
$ kubectl get secret default-token-78r9t -o jsonpath=\"{['data']['ca\\.crt']}\" | base64 --decode\r\n-----BEGIN CERTIFICATE-----\r\nMIIDATCCAemgAwIBAgIJANFqxpnmuSSZMA0GCSqGSIb3DQEBCwUAMBcxFTATBgNV\r\n<\u4e2d\u7565>\r\n-----END CERTIFICATE-----\r\n<\/code><\/pre>\n3-3. \u670d\u52a1\u4ee3\u5e01<\/h2>\n
\u9996\u5148\uff0c\u6839\u636e\u4ee5\u4e0b\u6e05\u5355\u521b\u5efa\u670d\u52a1\u8d26\u6237gitlab\u4ee5\u83b7\u53d6\u670d\u52a1\u4ee4\u724c\u3002<\/p>\n
apiVersion<\/span>:<\/span> v1<\/span>\r\nkind<\/span>:<\/span> ServiceAccount<\/span>\r\nmetadata<\/span>:<\/span>\r\n name<\/span>:<\/span> gitlab<\/span>\r\n namespace<\/span>:<\/span> kube-system<\/span>\r\n---<\/span>\r\napiVersion<\/span>:<\/span> rbac.authorization.k8s.io\/v1beta1<\/span>\r\nkind<\/span>:<\/span> ClusterRoleBinding<\/span>\r\nmetadata<\/span>:<\/span>\r\n name<\/span>:<\/span> gitlab-admin<\/span>\r\nroleRef<\/span>:<\/span>\r\n apiGroup<\/span>:<\/span> rbac.authorization.k8s.io<\/span>\r\n kind<\/span>:<\/span> ClusterRole<\/span>\r\n name<\/span>:<\/span> cluster-admin<\/span>\r\nsubjects<\/span>:<\/span>\r\n -<\/span> kind<\/span>:<\/span> ServiceAccount<\/span>\r\n name<\/span>:<\/span> gitlab<\/span>\r\n namespace<\/span>:<\/span> kube-system<\/span>\r\n<\/code><\/pre>\n\u5c06\u521b\u5efa\u7684\u6587\u4ef6\u4f7f\u7528kubectl apply\u547d\u4ee4\u5e94\u7528\u3002<\/p>\n
$ kubectl apply -f gitlab-admin-service-account.yaml\r\n<\/code><\/pre>\n\u56e0\u4e3a\u521b\u5efa\u4e86\u670d\u52a1\u5e10\u6237\uff0c\u6240\u4ee5\u9700\u8981\u83b7\u53d6\u4ee4\u724c\u3002
\n\u8bf7\u5c06\u4ece\u6700\u540e\u4e00\u4e2atoken:\u4e4b\u540e\u7684\u5b57\u7b26\u4e32\uff08\u4f8b\u5982\u4eceeyJhbGciOi\u5230\u672b\u5c3e\uff09\u4fdd\u5b58\u5728\u67d0\u4e2a\u5730\u65b9\u3002<\/p>\n
$ kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep gitlab | awk '{print$1}')\r\nName: gitlab-token-dqjlx\r\nNamespace: kube-system\r\nLabels: <none>\r\nAnnotations: kubernetes.io\/service-account.name: gitlab\r\n kubernetes.io\/service-account.uid: 7e73e750-4bfc-4718-9ee0-ebe83da58c36\r\n\r\nType: kubernetes.io\/service-account-token\r\n\r\nData\r\n====\r\nca.crt: 1103 bytes\r\nnamespace: 11 bytes\r\ntoken: eyJhbGciOiJSUzI1NiIsImtpZCI6IjVURFF<\u4ee5\u4e0b\u7565>\r\n<\/code><\/pre>\n\u63a5\u4e0b\u6765\u7684\u90e8\u5206<\/p>\n
\u5728\u540e\u534a\u90e8\u5206\uff0c\u6211\u4eec\u5c06\u4ecb\u7ecd\u5982\u4f55\u5c06MicroK8s\u4e0e\u672c\u5730GitLab\u8fde\u63a5\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\u3002<\/h1>\n","protected":false},"excerpt":{"rendered":"
\u6211\u4eec\u63d0\u4f9b\u7684\u662f\u6bcf\u6b21\u90fd\u65e0\u6cd5\u901a\u8fc7\u8c37\u6b4c\u641c\u7d22\u627e\u5230\u7684\u5c0f\u8da3\u95fb\u3002 \u672c\u6587\u662f\u4e2a\u4eba\u89c2\u70b9\uff0c\u4e0e\u4f5c\u8005\u6240\u5c5e\u7684\u4efb\u4f55\u7ec4\u7ec7\u65e0\u5173\u3002 \u8fd9\u4e2a\u65b9\u6cd5\u5728Git […]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-36112","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n
\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5728\u672c\u5730\u90e8\u7f72\u7684gitlab\u4e0a\u8fde\u63a5\u5230microk8s\uff0c\u5e76\u4f53\u9a8cgitlab\u7684auto-devops\u529f\u80fd\uff08\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09\" \/>\n<meta property=\"og:description\" content=\"\u6211\u4eec\u63d0\u4f9b\u7684\u662f\u6bcf\u6b21\u90fd\u65e0\u6cd5\u901a\u8fc7\u8c37\u6b4c\u641c\u7d22\u627e\u5230\u7684\u5c0f\u8da3\u95fb\u3002 \u672c\u6587\u662f\u4e2a\u4eba\u89c2\u70b9\uff0c\u4e0e\u4f5c\u8005\u6240\u5c5e\u7684\u4efb\u4f55\u7ec4\u7ec7\u65e0\u5173\u3002 \u8fd9\u4e2a\u65b9\u6cd5\u5728Git […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5728\u672c\u5730\u90e8\u7f72\u7684gitlab\u4e0a\u8fde\u63a5\u5230microk8s\uff0c\u5e76\u4f53\u9a8cgitlab\u7684auto-devops\u529f\u80fd\uff08\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-18T09:06:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T00:44:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d274337434c4406c3b85a\/5-0.png\" \/>\n<meta name=\"author\" content=\"\u6e05, \u626c\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u626c\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/\",\"name\":\"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-02-18T09:06:45+00:00\",\"dateModified\":\"2024-04-29T00:44:39+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\",\"name\":\"\u6e05, \u626c\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u626c\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5728\u672c\u5730\u90e8\u7f72\u7684gitlab\u4e0a\u8fde\u63a5\u5230microk8s\uff0c\u5e76\u4f53\u9a8cgitlab\u7684auto-devops\u529f\u80fd\uff08\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09","og_description":"\u6211\u4eec\u63d0\u4f9b\u7684\u662f\u6bcf\u6b21\u90fd\u65e0\u6cd5\u901a\u8fc7\u8c37\u6b4c\u641c\u7d22\u627e\u5230\u7684\u5c0f\u8da3\u95fb\u3002 \u672c\u6587\u662f\u4e2a\u4eba\u89c2\u70b9\uff0c\u4e0e\u4f5c\u8005\u6240\u5c5e\u7684\u4efb\u4f55\u7ec4\u7ec7\u65e0\u5173\u3002 \u8fd9\u4e2a\u65b9\u6cd5\u5728Git […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5728\u672c\u5730\u90e8\u7f72\u7684gitlab\u4e0a\u8fde\u63a5\u5230microk8s\uff0c\u5e76\u4f53\u9a8cgitlab\u7684auto-devops\u529f\u80fd\uff08\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-02-18T09:06:45+00:00","article_modified_time":"2024-04-29T00:44:39+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d274337434c4406c3b85a\/5-0.png"}],"author":"\u6e05, \u626c","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u626c","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/","name":"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-02-18T09:06:45+00:00","dateModified":"2024-04-29T00:44:39+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461","name":"\u6e05, \u626c","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","caption":"\u6e05, \u626c"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=36112"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36112\/revisions"}],"predecessor-version":[{"id":84234,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36112\/revisions\/84234"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=36112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=36112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=36112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
sudo <\/span>update &&<\/span> sudo <\/span>upgrade -y<\/span> &&<\/span> sudo <\/span>reboot\r\nsudo install <\/span>snap &&<\/span> sudo <\/span>snap install <\/span>microk8s --classic<\/span>\r\nsudo <\/span>usermod -a<\/span> -G<\/span> microk8s \uff1c\u30e6\u30fc\u30b6\u30fc\u540d\uff1e\r\n<\/code><\/pre>\n2-2. \u786e\u8ba4MicroK8s\u7684\u542f\u52a8\u72b6\u6001\u3002<\/h2>\n$ <\/span>microk8s.status\r\nmicrok8s is running\r\nhigh-availability: no\r\n datastore master nodes: 127.0.0.1:19001\r\n datastore standby nodes: none\r\naddons:\r\n enabled:\r\n ha-cluster # Configure high availability on the current node<\/span>\r\n disabled:\r\n ambassador # Ambassador API Gateway and Ingress<\/span>\r\n cilium # SDN, fast with full network policy<\/span>\r\n dashboard # The Kubernetes dashboard<\/span>\r\n dns # CoreDNS<\/span>\r\n fluentd # Elasticsearch-Fluentd-Kibana logging and monitoring<\/span>\r\n gpu # Automatic enablement of Nvidia CUDA<\/span>\r\n helm # Helm 2 - the package manager for Kubernetes<\/span>\r\n helm3 # Helm 3 - Kubernetes package manager<\/span>\r\n host-access # Allow Pods connecting to Host services smoothly<\/span>\r\n ingress # Ingress controller for external access<\/span>\r\n istio # Core Istio service mesh services<\/span>\r\n jaeger # Kubernetes Jaeger operator with its simple config<\/span>\r\n keda # Kubernetes-based Event Driven Autoscaling<\/span>\r\n knative # The Knative framework on Kubernetes.<\/span>\r\n kubeflow # Kubeflow for easy ML deployments<\/span>\r\n linkerd # Linkerd is a service mesh for Kubernetes and other frameworks<\/span>\r\n rbac # Role-Based Access Control for authorisation<\/span>\r\n storage # Storage class; allocates storage from host directory<\/span>\r\n metallb # Loadbalancer for your Kubernetes cluster<\/span>\r\n metrics-server # K8s Metrics Server for API access to service metrics<\/span>\r\n multus # Multus CNI enables attaching multiple network interfaces to pods<\/span>\r\n portainer # Portainer UI for your Kubernetes cluster<\/span>\r\n prometheus # Prometheus operator for monitoring and logging<\/span>\r\n registry # Private image registry exposed on localhost:32000<\/span>\r\n traefik # traefik Ingress controller for external access<\/span>\r\n<\/code><\/pre>\n\u7528kubectl\u786e\u8ba4\u662f\u5426\u53ef\u4ee5\u83b7\u53d6\u8282\u70b9<\/p>\n
$ microk8s.kubectl get nodes\r\nNAME STATUS ROLES AGE VERSION\r\nip-10-x-y-z Ready <none> 48m v1.17.0\r\n<\/code><\/pre>\n\u8fd0\u884cmicrok8s\u7684addon\u3002<\/h2>\n
\u4ee5\u4e0b\u662f\u9700\u8981\u7684\u5fc5\u8981\u63d2\u4ef6\u3002
\n\u7531GitLab\u65b9\u9762\u5b89\u88c5Ingress\u7b49\uff0c\u56e0\u6b64\u63d2\u4ef6\u53ef\u4ee5\u6700\u7b80\u5316\u3002
\n\u6211\u8ba4\u4e3aDashboard\u4e4b\u7c7b\u7684\u6ca1\u6709\u95ee\u9898\u3002<\/p>\n
\n- \n
rbac \u89d2\u8272\u57fa\u4e8e\u7684\u8bbf\u95ee\u63a7\u5236<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\n- \n
DNS \u57df\u540d\u7cfb\u7edf<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\n- \n
\u5b58\u50a8<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
MetalLB<\/ol>\n\u542f\u7528RBAC\u3001DNS\u548c\u5b58\u50a8\u3002<\/h3>\n
RBAC\u548cDNS\u662f\u9ed8\u8ba4\u5fc5\u9700\u7684\u3002
\n\u5b58\u50a8\u662f\u4e3a\u9700\u8981PV\u7684\u5e94\u7528\u7a0b\u5e8f\u800c\u5fc5\u9700\u7684\u3002<\/p>\n
$ <\/span>sudo <\/span>microk8s.enable rbac\r\n$ <\/span>sudo <\/span>microk8s.enable dns storage\r\n<\/code><\/pre>\n2-3-2. metallb (\u91d1\u5c5e\u8d1f\u8f7d\u5747\u8861).<\/h3>\n
\u8bf7\u5728\u542f\u7528\u65f6\u4f7f\u7528a.b.c.d-a.b.c.e\u7684\u683c\u5f0f\u6307\u5b9a\u53ef\u4ee5\u4f7f\u7528\u7684IP\u5730\u5740\uff0cMetallb\u662f\u4e3aIngress\u4f7f\u7528\u7684LoadBalancer\u6240\u5fc5\u9700\u7684\u3002<\/p>\n
$ sudo microk8s.enable metallb\r\nEnabling MetalLB\r\nEnter each IP address range delimited by comma (e.g. '10.64.140.43-10.64.140.49,192.168.0.105-192.168.0.111'): 192.168.10.20-192.168.10.30\r\nApplying Metallb manifest\r\nnamespace\/metallb-system created\r\nsecret\/memberlist created\r\npodsecuritypolicy.policy\/controller created\r\npodsecuritypolicy.policy\/speaker created\r\nserviceaccount\/controller created\r\nserviceaccount\/speaker created\r\nclusterrole.rbac.authorization.k8s.io\/metallb-system:controller created\r\nclusterrole.rbac.authorization.k8s.io\/metallb-system:speaker created\r\nrole.rbac.authorization.k8s.io\/config-watcher created\r\nrole.rbac.authorization.k8s.io\/pod-lister created\r\nclusterrolebinding.rbac.authorization.k8s.io\/metallb-system:controller created\r\nclusterrolebinding.rbac.authorization.k8s.io\/metallb-system:speaker created\r\nrolebinding.rbac.authorization.k8s.io\/config-watcher created\r\nrolebinding.rbac.authorization.k8s.io\/pod-lister created\r\ndaemonset.apps\/speaker created\r\ndeployment.apps\/controller created\r\nconfigmap\/config created\r\nMetalLB is enabled\r\n<\/code><\/pre>\n\u786e\u8ba4\u63d2\u4ef6\u662f\u5426\u5df2\u542f\u7528\u3002<\/h3>\n$ <\/span>microk8s.status\r\nmicrok8s is running\r\nhigh-availability: no\r\n datastore master nodes: 127.0.0.1:19001\r\n datastore standby nodes: none\r\naddons:\r\n enabled:\r\n dns # CoreDNS<\/span>\r\n ha-cluster # Configure high availability on the current node<\/span>\r\n metallb # Loadbalancer for your Kubernetes cluster<\/span>\r\n rbac # Role-Based Access Control for authorisation<\/span>\r\n storage # Storage class; allocates storage from host directory<\/span>\r\n<\u4ee5\u4e0b\u7565>\r\n<\/code><\/pre>\n2-5. (\u9009\u9879) \u4fee\u6539CoreDNS<\/h2>\n
\u4e3a\u4e86\u83b7\u53d6\u516c\u53f8\u5185\u90e8\u7684\u672c\u5730GitLab\u7684IP\u5730\u5740\uff0c\u6211\u60f3\u4ece\u516c\u53f8\u5185\u90e8DNS\u83b7\u53d6\u5b83\uff0c\u6240\u4ee5\u6211\u6539\u53d8\u4e86DNS\u670d\u52a1\u5668\u7684\u5f15\u7528\u5730\u5740\u3002<\/p>\n
$ <\/span>kubectl edit configmaps coredns -n<\/span> kube-system -o<\/span> yaml\r\n<\/code><\/pre>\n\u867d\u7136\u4e0d\u592a\u4f18\u96c5\uff0c\u4f46\u6211\u76f4\u63a5\u91cd\u65b0\u5199\u4e86\u4e00\u904d\u3002<\/p>\n
data:\r\n Corefile: \".:53 {\\n errors\\n health {\\n lameduck 5s\\n }\\n ready\\n\r\n \\ log . {\\n class error\\n }\\n kubernetes cluster.local in-addr.arpa\r\n ip6.arpa {\\n pods insecure\\n fallthrough in-addr.arpa ip6.arpa\\n }\\n\r\n \\ prometheus :9153\\n forward . <\u793e\u5185DNS\u30b5\u30fc\u30d0\u30fc> \\n cache 30\\n loop\\n reload\\n\r\n \\ loadbalance\\n}\\n\"\r\n<\/code><\/pre>\n\u8ba9\u6211\u4eec\u4ee5\u4ee5\u4e0b\u65b9\u5f0f\u786e\u8ba4\u662f\u5426\u53ef\u4ee5\u89e3\u6790DNS\u3002<\/p>\n
$ <\/span>kubectl run busybox --restart<\/span>=<\/span>Never --image<\/span>=<\/span>busybox:1.28 --<\/span> sleep <\/span>3600\r\n$ <\/span>kubectl exec <\/span>busybox --<\/span> nslookup <\u30aa\u30f3\u30d7\u30ecGitLab FQDN>\r\n<\/code><\/pre>\n2-6. \uff08\u9009\u9879\uff09\u901a\u8fc7 kubectl \u4ece\u5916\u90e8\u8fde\u63a5\u5e76\u83b7\u53d6\u914d\u7f6e<\/h2>\n
\u4e0d\u662f\u5fc5\u9700\u7684\uff0c\u8981\u4eceGitLab\u8fdb\u884c\u8fde\u63a5\u3002<\/p>\n
\u83b7\u53d6kubeconfig\u3002<\/p>\n
$ microk8s.config | tee gitlab-microk8s.config\r\napiVersion: v1\r\nclusters:\r\n- cluster:\r\n certificate-authority-data: LS0tLS1CRUdJxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\r\n server: https:\/\/10.x.y.z:16443\r\n name: microk8s-cluster\r\ncontexts:\r\n- context:\r\n cluster: microk8s-cluster\r\n user: admin\r\n name: microk8s\r\ncurrent-context: microk8s\r\nkind: Config\r\npreferences: {}\r\nusers:\r\n- name: admin\r\n user:\r\n username: admin\r\n password: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\r\n<\/code><\/pre>\n\u83b7\u53d6\u4e0eGitLab\u96c6\u6210\u6240\u9700\u7684\u4fe1\u606f\u3002<\/h1>\n
\u8981\u4e0eGitLab\u8fdb\u884c\u534f\u4f5c\uff0c\u9700\u8981\u4ee5\u4e0b\u4fe1\u606f\u3002<\/p>\n
\n- \n
API\u7f51\u5740<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\n- \n
CA\u8bc1\u4e66<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\n- \n
\u670d\u52a1\u4ee4\u724c<\/ol>\n<\/li>\n<\/ol>\n <\/p>\n
\u8bf7\u5206\u522b\u83b7\u53d6\u3002<\/ol>\n3-1. API\u7f51\u5740<\/h2>\n
\u4ee5\u4e0b\u662f\u5bf92-6\u4e2d\u83b7\u53d6\u7684kubeconfig\u7684server\u90e8\u5206\u8fdb\u884c\u6c49\u8bed\u7ffb\u8bd1\u7684\u4e00\u79cd\u53ef\u80fd\u9009\u9879\uff1a
\nkubeconfig\u4e2d\u83b7\u53d6\u7684server\u90e8\u5206\u4e3ahttps:\/\/10.x.y.z:16443\u7684https:\/\/10.x.y.z:16443\u90e8\u5206\u3002<\/p>\n
3-2. CA\u8bc1\u4e66 – CA\u8bc1\u4e66<\/h2>\n
\u4ecekubectl get secrets\u547d\u4ee4\u7684default-token\u4e2d\u83b7\u53d6\u8bc1\u4e66\u3002<\/p>\n
$ kubectl get secrets\r\nNAME TYPE DATA AGE\r\ndefault-token-78r9t kubernetes.io\/service-account-token 3 46h\r\n<\/code><\/pre>\n\u4ece\u9ed8\u8ba4\u4ee4\u724c”78r9t”\u83b7\u53d6\u8bc1\u4e66\u3002<\/p>\n
$ kubectl get secret default-token-78r9t -o jsonpath=\"{['data']['ca\\.crt']}\" | base64 --decode\r\n-----BEGIN CERTIFICATE-----\r\nMIIDATCCAemgAwIBAgIJANFqxpnmuSSZMA0GCSqGSIb3DQEBCwUAMBcxFTATBgNV\r\n<\u4e2d\u7565>\r\n-----END CERTIFICATE-----\r\n<\/code><\/pre>\n3-3. \u670d\u52a1\u4ee3\u5e01<\/h2>\n
\u9996\u5148\uff0c\u6839\u636e\u4ee5\u4e0b\u6e05\u5355\u521b\u5efa\u670d\u52a1\u8d26\u6237gitlab\u4ee5\u83b7\u53d6\u670d\u52a1\u4ee4\u724c\u3002<\/p>\n
apiVersion<\/span>:<\/span> v1<\/span>\r\nkind<\/span>:<\/span> ServiceAccount<\/span>\r\nmetadata<\/span>:<\/span>\r\n name<\/span>:<\/span> gitlab<\/span>\r\n namespace<\/span>:<\/span> kube-system<\/span>\r\n---<\/span>\r\napiVersion<\/span>:<\/span> rbac.authorization.k8s.io\/v1beta1<\/span>\r\nkind<\/span>:<\/span> ClusterRoleBinding<\/span>\r\nmetadata<\/span>:<\/span>\r\n name<\/span>:<\/span> gitlab-admin<\/span>\r\nroleRef<\/span>:<\/span>\r\n apiGroup<\/span>:<\/span> rbac.authorization.k8s.io<\/span>\r\n kind<\/span>:<\/span> ClusterRole<\/span>\r\n name<\/span>:<\/span> cluster-admin<\/span>\r\nsubjects<\/span>:<\/span>\r\n -<\/span> kind<\/span>:<\/span> ServiceAccount<\/span>\r\n name<\/span>:<\/span> gitlab<\/span>\r\n namespace<\/span>:<\/span> kube-system<\/span>\r\n<\/code><\/pre>\n\u5c06\u521b\u5efa\u7684\u6587\u4ef6\u4f7f\u7528kubectl apply\u547d\u4ee4\u5e94\u7528\u3002<\/p>\n
$ kubectl apply -f gitlab-admin-service-account.yaml\r\n<\/code><\/pre>\n\u56e0\u4e3a\u521b\u5efa\u4e86\u670d\u52a1\u5e10\u6237\uff0c\u6240\u4ee5\u9700\u8981\u83b7\u53d6\u4ee4\u724c\u3002
\n\u8bf7\u5c06\u4ece\u6700\u540e\u4e00\u4e2atoken:\u4e4b\u540e\u7684\u5b57\u7b26\u4e32\uff08\u4f8b\u5982\u4eceeyJhbGciOi\u5230\u672b\u5c3e\uff09\u4fdd\u5b58\u5728\u67d0\u4e2a\u5730\u65b9\u3002<\/p>\n
$ kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep gitlab | awk '{print$1}')\r\nName: gitlab-token-dqjlx\r\nNamespace: kube-system\r\nLabels: <none>\r\nAnnotations: kubernetes.io\/service-account.name: gitlab\r\n kubernetes.io\/service-account.uid: 7e73e750-4bfc-4718-9ee0-ebe83da58c36\r\n\r\nType: kubernetes.io\/service-account-token\r\n\r\nData\r\n====\r\nca.crt: 1103 bytes\r\nnamespace: 11 bytes\r\ntoken: eyJhbGciOiJSUzI1NiIsImtpZCI6IjVURFF<\u4ee5\u4e0b\u7565>\r\n<\/code><\/pre>\n\u63a5\u4e0b\u6765\u7684\u90e8\u5206<\/p>\n
\u5728\u540e\u534a\u90e8\u5206\uff0c\u6211\u4eec\u5c06\u4ecb\u7ecd\u5982\u4f55\u5c06MicroK8s\u4e0e\u672c\u5730GitLab\u8fde\u63a5\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\u3002<\/h1>\n","protected":false},"excerpt":{"rendered":"
\u6211\u4eec\u63d0\u4f9b\u7684\u662f\u6bcf\u6b21\u90fd\u65e0\u6cd5\u901a\u8fc7\u8c37\u6b4c\u641c\u7d22\u627e\u5230\u7684\u5c0f\u8da3\u95fb\u3002 \u672c\u6587\u662f\u4e2a\u4eba\u89c2\u70b9\uff0c\u4e0e\u4f5c\u8005\u6240\u5c5e\u7684\u4efb\u4f55\u7ec4\u7ec7\u65e0\u5173\u3002 \u8fd9\u4e2a\u65b9\u6cd5\u5728Git […]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-36112","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n
\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5728\u672c\u5730\u90e8\u7f72\u7684gitlab\u4e0a\u8fde\u63a5\u5230microk8s\uff0c\u5e76\u4f53\u9a8cgitlab\u7684auto-devops\u529f\u80fd\uff08\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09\" \/>\n<meta property=\"og:description\" content=\"\u6211\u4eec\u63d0\u4f9b\u7684\u662f\u6bcf\u6b21\u90fd\u65e0\u6cd5\u901a\u8fc7\u8c37\u6b4c\u641c\u7d22\u627e\u5230\u7684\u5c0f\u8da3\u95fb\u3002 \u672c\u6587\u662f\u4e2a\u4eba\u89c2\u70b9\uff0c\u4e0e\u4f5c\u8005\u6240\u5c5e\u7684\u4efb\u4f55\u7ec4\u7ec7\u65e0\u5173\u3002 \u8fd9\u4e2a\u65b9\u6cd5\u5728Git […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5728\u672c\u5730\u90e8\u7f72\u7684gitlab\u4e0a\u8fde\u63a5\u5230microk8s\uff0c\u5e76\u4f53\u9a8cgitlab\u7684auto-devops\u529f\u80fd\uff08\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-18T09:06:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T00:44:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d274337434c4406c3b85a\/5-0.png\" \/>\n<meta name=\"author\" content=\"\u6e05, \u626c\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u626c\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/\",\"name\":\"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-02-18T09:06:45+00:00\",\"dateModified\":\"2024-04-29T00:44:39+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\",\"name\":\"\u6e05, \u626c\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u626c\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5728\u672c\u5730\u90e8\u7f72\u7684gitlab\u4e0a\u8fde\u63a5\u5230microk8s\uff0c\u5e76\u4f53\u9a8cgitlab\u7684auto-devops\u529f\u80fd\uff08\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09","og_description":"\u6211\u4eec\u63d0\u4f9b\u7684\u662f\u6bcf\u6b21\u90fd\u65e0\u6cd5\u901a\u8fc7\u8c37\u6b4c\u641c\u7d22\u627e\u5230\u7684\u5c0f\u8da3\u95fb\u3002 \u672c\u6587\u662f\u4e2a\u4eba\u89c2\u70b9\uff0c\u4e0e\u4f5c\u8005\u6240\u5c5e\u7684\u4efb\u4f55\u7ec4\u7ec7\u65e0\u5173\u3002 \u8fd9\u4e2a\u65b9\u6cd5\u5728Git […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5728\u672c\u5730\u90e8\u7f72\u7684gitlab\u4e0a\u8fde\u63a5\u5230microk8s\uff0c\u5e76\u4f53\u9a8cgitlab\u7684auto-devops\u529f\u80fd\uff08\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-02-18T09:06:45+00:00","article_modified_time":"2024-04-29T00:44:39+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d274337434c4406c3b85a\/5-0.png"}],"author":"\u6e05, \u626c","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u626c","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/","name":"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-02-18T09:06:45+00:00","dateModified":"2024-04-29T00:44:39+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5728\u672c\u5730\u90e8\u7f72\u7684GitLab\u4e0a\u8fde\u63a5\u5230MicroK8s\uff0c\u5e76\u4f53\u9a8cGitLab\u7684Auto DevOps\u529f\u80fd\uff08\u524d\u534a\u90e8\u5206\uff09"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461","name":"\u6e05, \u626c","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","caption":"\u6e05, \u626c"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8%e6%9c%ac%e5%9c%b0%e9%83%a8%e7%bd%b2%e7%9a%84gitlab%e4%b8%8a%e8%bf%9e%e6%8e%a5%e5%88%b0microk8s%ef%bc%8c%e5%b9%b6%e4%bd%93%e9%aa%8cgitlab%e7%9a%84auto-devops%e5%8a%9f%e8%83%bd%ef%bc%88\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=36112"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36112\/revisions"}],"predecessor-version":[{"id":84234,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36112\/revisions\/84234"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=36112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=36112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=36112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}