配置jenkins连通k8s

原创

庭中有奇树 2022-05-06 15:53:41 博主文章分类：k8s ©著作权

文章标签 5e 7z 文章分类 运维

©著作权归作者所有：来自51CTO博客作者庭中有奇树的原创作品，请联系作者获取转载授权，否则将追究法律责任

# 创建service account root@kube-jenkins-nonlive-10-129-104-3:/home/toc/SSE# kubectl create sa jenkins # 绑定cluster-admin root@kube-jenkins-nonlive-10-129-104-3:/home/toc/SSE# kubectl create clusterrolebinding jenkins --clusterrole cluster-admin --serviceaccount=default:jenkins # 查看账户 root@kube-jenkins-nonlive-10-129-104-3:/home/toc/SSE# kubectl describe sa jenkins Name: jenkins Namespace: default Labels: <none> Annotations: <none> Image pull secrets: <none> Mountable secrets: jenkins-token-zfqr5 Tokens: jenkins-token-zfqr5 Events: <none> #查看token信息 root@kube-jenkins-nonlive-10-129-104-3:/home/toc/SSE# kubectl describe secrets jenkins-token-zfqr5 Name: jenkins-token-zfqr5 Namespace: default Labels: <none> Annotations: kubernetes.io/service-account.name: jenkins kubernetes.io/service-account.uid: b740444c-ab30-4242-970e-eabb81b5b2fc Type: kubernetes.io/service-account-token Data ==== ca.crt: 1066 bytes namespace: 7 bytes token: eyJhbGciOiJSUzI1NiIsImtpZCI6Ijc5eklmaUVpbjZMbVlwNG40MzFnZmJHaWllWF9Bb0p3SHdqYmVHclcwcVEifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJkZWZhdWx0Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6ImplbmtpbnMtdG9rZW4temZxcjUiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiamVua2lucyIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6ImI3NDA0NDRjLWFiMzAtNDI0Mi05NzBlLWVhYmI4MWI1YjJmYyIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDpkZWZhdWx0OmplbmtpbnMifQ.xPaRNWnV5yL6zoUK-TB6Vzk78w120b19xikzg-4PL9_6KFEM8Z-HiM1LNmfvf8PftwwWJY_k8aLzGpvU_gwESvSzpjR1s8n7G8SscwnIZhaREiYVt9HplfPoWWqkyRs4Tt62kY5Ii2bJuo702hRCwZJ4d__hbKz_thCnKM9PUx-qq3B_pFqNRDYaeM3mG9FLx7hw7zUA0hMPl0wwLFv5levp1XvNmlsPPjGb4bXT2M-68ujSDF4BKb2kNmzN8yPz73t8iGC0t31L8KYXUoidDwInsnsUVMeSHTjbXldbby_upeHWU6q-qbgGDSYOqI2ySPbP9IZlNqphg-7R41iCLQ

# 创建service account
root@kube-jenkins-nonlive-10-129-104-3:/home/toc/SSE# kubectl create sa jenkins

# 绑定cluster-admin
root@kube-jenkins-nonlive-10-129-104-3:/home/toc/SSE# kubectl create clusterrolebinding jenkins --clusterrole cluster-admin --serviceaccount=default:jenkins

# 查看账户
root@kube-jenkins-nonlive-10-129-104-3:/home/toc/SSE# kubectl describe sa jenkins
Name:                jenkins
Namespace:           default
Labels:              <none>
Annotations:         <none>
Image pull secrets:  <none>
Mountable secrets:   jenkins-token-zfqr5
Tokens:              jenkins-token-zfqr5
Events:              <none>

#查看token信息
root@kube-jenkins-nonlive-10-129-104-3:/home/toc/SSE# kubectl describe secrets jenkins-token-zfqr5
Name:         jenkins-token-zfqr5
Namespace:    default
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: jenkins
              kubernetes.io/service-account.uid: b740444c-ab30-4242-970e-eabb81b5b2fc

Type:  kubernetes.io/service-account-token

Data
====
ca.crt:     1066 bytes
namespace:  7 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6Ijc5eklmaUVpbjZMbVlwNG40MzFnZmJHaWllWF9Bb0p3SHdqYmVHclcwcVEifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJkZWZhdWx0Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6ImplbmtpbnMtdG9rZW4temZxcjUiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiamVua2lucyIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6ImI3NDA0NDRjLWFiMzAtNDI0Mi05NzBlLWVhYmI4MWI1YjJmYyIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDpkZWZhdWx0OmplbmtpbnMifQ.xPaRNWnV5yL6zoUK-TB6Vzk78w120b19xikzg-4PL9_6KFEM8Z-HiM1LNmfvf8PftwwWJY_k8aLzGpvU_gwESvSzpjR1s8n7G8SscwnIZhaREiYVt9HplfPoWWqkyRs4Tt62kY5Ii2bJuo702hRCwZJ4d__hbKz_thCnKM9PUx-qq3B_pFqNRDYaeM3mG9FLx7hw7zUA0hMPl0wwLFv5levp1XvNmlsPPjGb4bXT2M-68ujSDF4BKb2kNmzN8yPz73t8iGC0t31L8KYXUoidDwInsnsUVMeSHTjbXldbby_upeHWU6q-qbgGDSYOqI2ySPbP9IZlNqphg-7R41iCLQ