k8s问题整理：helm harbor(docker仓库)无法登录

- 日理万妓 2023-06-09 13:28 1阅读 0赞

近期彤哥在研究k8s的东西，今天使用helm装了一个harbor之后，通过NodePort方式暴露了一个端口出去，结果死活登录不上，一直提示“用户名或密码错误”：

最后，查遍各种资料，才发现k8s中的harbor暂时只支持ingress方式访问，其实在装harbor的时候默认已经配置好了ingress：

[root@master ~]# kubectl get ingress -n harbor
    NAME                    HOSTS                                     ADDRESS   PORTS     AGE
    harbor-harbor-ingress   core.harbor.domain,notary.harbor.domain             80, 443   85m
    [root@master ~]# kubectl edit ingress harbor-harbor-ingress -n harbor
    
    # Please edit the object below. Lines beginning with a '#' will be ignored,
    # and an empty file will abort the edit. If an error occurs while saving this file will be
    # reopened with the relevant failures.
    #
    apiVersion: extensions/v1beta1
    kind: Ingress
    metadata:
      annotations:
        ingress.kubernetes.io/proxy-body-size: "0"
        ingress.kubernetes.io/ssl-redirect: "true"
        nginx.ingress.kubernetes.io/proxy-body-size: "0"
        nginx.ingress.kubernetes.io/ssl-redirect: "true"
      creationTimestamp: "2019-10-21T05:55:05Z"
      generation: 1
      labels:
        app: harbor
        chart: harbor
        heritage: Tiller
        release: harbor
      name: harbor-harbor-ingress
      namespace: harbor
      resourceVersion: "497318"
      selfLink: /apis/extensions/v1beta1/namespaces/harbor/ingresses/harbor-harbor-ingress
      uid: caaf29dd-597a-49c6-85da-a4f6be594d53
    spec:
      rules:
      - host: core.harbor.domain
        http:
          paths:
          - backend:
              serviceName: harbor-harbor-portal
              servicePort: 80
            path: /
          - backend:
              serviceName: harbor-harbor-core
              servicePort: 80
            path: /api/
          - backend:
              serviceName: harbor-harbor-core
              servicePort: 80
            path: /service/
          - backend:
              serviceName: harbor-harbor-core
              servicePort: 80
            path: /v2/
          - backend:
              serviceName: harbor-harbor-core
              servicePort: 80
            path: /chartrepo/
          - backend:
              serviceName: harbor-harbor-core
              servicePort: 80
            path: /c/
      - host: notary.harbor.domain
        http:
          paths:
          - backend:
              serviceName: harbor-harbor-notary-server
              servicePort: 4443
            path: /
      tls:
      - hosts:
        - core.harbor.domain
        secretName: harbor-harbor-ingress
      - hosts:
        - notary.harbor.domain
        secretName: harbor-harbor-ingress
    status:
      loadBalancer: {}

通过edit查看可以看到默认配置的是`core.harbor.domain`域名，彤哥便在本地的hosts文件中加上这个域名指向任意一台work节点，使用https一访问，果然通了，而且登录正常。

前提：已安装ingress controller，彤哥这里安装的是nginx-ingress，可以通过下面的方式快速安装，注意下版本：

kubectl apply -f https://kuboard.cn/install-script/v1.16.2/nginx-ingress.yaml

同时欢迎关注我的公众号“彤哥读源码”，一起玩耍。