本篇文字包括以下兩個部分

• docker私有倉庫搭建
• kubernetes-dashboard搭建

docker私有倉庫搭建

1. /etc/pki/tls/openssl.cnf

[ v3_ca ]  
subjectAltName = IP:192.168.169.125

cd /etc/docker
mkdir -p certs && openssl req -newkey rsa:4096 -nodes -sha256 -keyout certs/domain.key -x509 -days 365 -out certs/domain.crt

mkdir -p /etc/docker/certs.
 
d/192.168.51.232:5000
cp certs/domain.crt /etc/docker/certs.d/192.168.51.232:5000/ca.crt
systemctl restart docker

docker run -d -p 5000:5000 --restart=always --name registry   -v `pwd`/certs:/certs   -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/domain.crt   -e REGISTRY_HTTP_TLS_KEY=/certs/domain.key   registry:2

其他node節點執行如下操作

# mkdir -p /etc/docker/certs.d/192.168.51.232:5000
# scp [email protected]:/etc/docker/certs/domain.crt /etc/docker/certs.d/192.168.169.125:5000/ca.crt
# systemctl restart docker

可以在其他國內的映象倉庫上拉取pause映象和dashboard映象
在映象倉庫機器上

docker pull docker.io/kubernetes/pause
docker tag  docker.io/kubernetes/pause 192.168.51
 
.232:5000/pause
docker push  192.168.51.232:5000/pause

將pause映象上傳到私有倉庫上

同理dashboard映象也如此

docker pull daocloud.io/gfkchinanetquest/kubernetes-dashboard-amd64
docker tag daocloud.io/gfkchinanetquest/kubernetes-dashboard-amd64 192.168.51.232:5000/kube-ui:v2
docker push 192.168.51.232:5000/kube-ui:v2

node節點配置修改
/etc/kubernetes/kubelet

kubernetes-dashboard搭建

wget http://rawgit.com/kubernetes/dashboard/master/src/deploy/kubernetes-dashboard.yaml

vi kubernetes-dashboard.yaml

    metadata:
      labels:
        app: kubernetes-dashboard
    spec:
      containers:
      - name: kubernetes-dashboard
        image: 192.168.51.232:5000/kube-ui:v3
        imagePullPolicy: Always
        ports:
        - containerPort: 9090
          protocol: TCP
        args:
          # Uncomment the following line to manually specify Kubernetes API server Host
          # If not specified, Dashboard will attempt to auto discover the API server and connect
          # to it. Uncomment only if the default does not work.
          - --apiserver-host=192.168.51.198:8080
        livenessProbe:
          httpGet:
            path: /
            port: 9090
          initialDelaySeconds: 30
          timeoutSeconds: 30
---
kind: Service
apiVersion: v1
metadata:
  labels:
    app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kube-system
spec:
  type: NodePort
  ports:
  - port: 80
    targetPort: 9090
  selector:
    app: kubernetes-dashboard

只截取了一部分

 image: 192.168.51.232:5000/kube-ui:v3
 - --apiserver-host=192.168.51.198:8080

 kubectl create -f kubernetes-dashboard.yaml  建立
 kubectl delete -f kubernetes-dashboard.yaml  刪除

 kubectl get pods --all-namespaces  檢視pods
 [[email protected] scripts]# kubectl get service --all-namespaces
NAMESPACE     NAME                   CLUSTER-IP       EXTERNAL-IP   PORT(S)        AGE
default       kubernetes             10.254.0.1       <none>        443/TCP        4h
kube-system   kubernetes-dashboard   10.254.146.237   <nodes>       80:31235/TCP   2h

通過describe的命令你可以知道該應用執行在那個節點上，而上面的31235為對映埠；

基於此kube-ui已經搭建成功；

更新
前兩天私有倉庫的系統壞了，我就按照上面的步驟再弄了一遍，結果老是報錯，改了行的方法

vi /etc/sysconfig/docker
新增
OPTIONS='--insecure-registry 192.168.51.232:5000'

systemctl restart docker
docker pull registry:2
docker run -d -p 5000:5000 -v /home/registry:/tmp/registry --name registry registry:2
curl 192.168.51.232:5000/v2/_catalog

報錯
Get https://192.168.51.232:5000/v1/_ping: http: server gave HTTP response to HTTPS client

修改
mv /etc/docker/daemon.json  /etc/docker/daemon.json.bak
vi /etc/docker/daemon.json
加入
{ "insecure-registries":["192.168.51.232:5000"] }

restart重啟

然後就神奇的可以了

[參考網站](http://www.jb51.net/article/106803.htm)