{"id":765,"date":"2020-04-12T19:30:04","date_gmt":"2020-04-12T17:30:04","guid":{"rendered":"https:\/\/loeilduse.fr\/?p=765"},"modified":"2020-05-01T19:21:16","modified_gmt":"2020-05-01T17:21:16","slug":"deployer-harbor-avec-type-loadbalancer","status":"publish","type":"post","link":"https:\/\/loeilduse.fr\/?p=765&lang=fr","title":{"rendered":"D\u00e9ployer Harbor avec type loadBalancer"},"content":{"rendered":"

Pour r\u00e9diger mes articles de vulgarisation, je suis amen\u00e9 \u00e0 tester certains produits. C’est tr\u00e8s chronophage surtout quand \u00e7a ne fonctionne pas du premier coup. Je fais pas mal de recherche sur Internet pour voir si des posts donnent des astuces mais des fois, il faut tenter d’autres pistes. C’est pour cela que j’ai cr\u00e9\u00e9 une rubrique Astuces Techniques, j’y posterai un r\u00e9sum\u00e9 des r\u00e9sultats de mes recherches qui pourrait aider d’autres personnes.<\/span><\/p>\n

Je consacre ce premier article au d\u00e9ploiement de la registry Harbor d\u00e9velopp\u00e9e initialement par VMware puis donn\u00e9 \u00e0 la CNCF. J’ai beaucoup gal\u00e9r\u00e9 pour la d\u00e9ployer afin qu’elle soit accessible derri\u00e8re un loadbalancer, j’avais le message suivant lorsque que docker tentait de s’y connecter :<\/span><\/p>\n

#docker login harbor.cpod-tkg.az-lab.shwrfr.com<\/span>
\nAuthenticating with existing credentials…<\/span>
\nLogin did not succeed, error: Error response from daemon<\/strong>: Get https:\/\/harbor.cpod-tkg.az-lab.shwrfr.com\/v2\/: Get https:\/\/core.harbor.domain<\/strong>\/service\/token?account=admin&client_id=docker&offline_token=true&service=harbor-registry: dial tcp: lookup core.harbor.domain<\/strong>: no such host<\/span><\/p>\n

J’utilise un environnement vSphere 7 pour h\u00e9berger un cluster Kubernetes V1.17.3 d\u00e9ploy\u00e9 via TKG V1. Le loadbalancer est un Metallb V0.82, Habor V1.10.1 et HELM 3<\/span><\/p>\n

T\u00e9l\u00e9charger Harbor via Helm 3 :<\/u><\/span><\/p>\n

#helm repo add harbor https:\/\/helm.goharbor.io<\/em><\/span><\/p>\n

#helm fetch harbor\/harbor \u2013untar<\/em><\/span><\/p>\n

Cr\u00e9er une storage class n\u00e9cessaire aux volumes persistent, cette storage class utilise une storage policy que j\u2019ai d\u00e9j\u00e0 cr\u00e9\u00e9 dans vSpehre\u00a0:<\/u><\/span><\/p>\n

kind: StorageClass<\/em><\/span><\/p>\n

apiVersion: storage.k8s.io\/v1<\/em><\/span><\/p>\n

metadata:<\/em><\/span><\/p>\n

\u00a0 name: silver-storage-class<\/em><\/span><\/p>\n

\u00a0 annotations:<\/em><\/span><\/p>\n

\u00a0\u00a0\u00a0 storageclass.kubernetes.io\/is-default-class: “true”<\/em><\/span><\/p>\n

provisioner: csi.vsphere.vmware.com<\/em><\/span><\/p>\n

parameters:<\/em><\/span><\/p>\n

\u00a0 <\/em>storagepolicyname: “silver-storage-class”<\/strong><\/em><\/span><\/p>\n

Installer Harbor avec les bons param\u00e8tres notamment externalURL<\/strong> :<\/u><\/span><\/p>\n

# helm install -n harbor-system registry harbor\/harbor –set<\/em> expose.type=loadBalancer,expose.tls.commonName=harbor.cpod-tkg.az-lab.shwrfr.com,externalURL=https:\/\/harbor.cpod-tkg.az-lab.shwrfr.com<\/strong><\/em><\/span><\/p>\n

Si vous n’utilisez pas de certificats sign\u00e9s, il faut que docker soit autoris\u00e9 \u00e0 utiliser une registry “Insecure” :<\/u><\/span><\/p>\n

#cat \/etc\/docker\/daemon.json<\/em><\/span><\/p>\n

{<\/em><\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 “insecure-registries” : [“172.20.4.71”, \u2019\u2019harbor.cpod-tkg.az-lab.shwrfr.com\u2019\u2019]<\/em><\/span><\/p>\n

}<\/em><\/span><\/p>\n

# systemctl restart docker<\/em><\/span><\/p>\n

T\u00e9l\u00e9charger le certificat depuis l\u2019UI d\u2019Harbor\u00a0=> projets => <votre nom de projet> => Reprositories => REGISTRY CERTIFICATE et le copier dans le r\u00e9pertoire docker pr\u00e9vu \u00e0 cet effet\u00a0:<\/u><\/span><\/p>\n

#mkdir -p \/etc\/docker\/certs.d\/172.20.4.71 <\/em>et\/ou<\/em> mkdir -p \/etc\/docker\/certs.d\/\u2019harbor.cpod-tkg.az-lab.shwrfr.com\u2019<\/em><\/span><\/p>\n

Normalement vous devriez pouvoir vous connecter \u00e0 Harbor via Docker :<\/span><\/p>\n

#docker login harbor.cpod-tkg.az-lab.shwrfr.com
\nAuthenticating with existing credentials…
\nWARNING! Your password will be stored unencrypted in \/root\/.docker\/config.json.
\nConfigure a credential helper to remove this warning. See
\nhttps:\/\/docs.docker.com\/engine\/reference\/commandline\/login\/#credentials-store<\/em><\/span><\/p>\n

Login Succeeded<\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Pour r\u00e9diger mes articles de vulgarisation, je suis amen\u00e9 \u00e0 tester certains produits. C’est tr\u00e8s chronophage surtout quand \u00e7a ne fonctionne pas du premier coup. Je fais pas mal de recherche sur Internet pour voir si des posts donnent des astuces mais des fois, il faut tenter d’autres pistes. C’est pour cela que j’ai cr\u00e9\u00e9<\/p><\/div>\n

Lire la suite<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[147],"tags":[32,26,169,148,28,167,168,6],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/loeilduse.fr\/index.php?rest_route=\/wp\/v2\/posts\/765"}],"collection":[{"href":"https:\/\/loeilduse.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/loeilduse.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/loeilduse.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/loeilduse.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=765"}],"version-history":[{"count":7,"href":"https:\/\/loeilduse.fr\/index.php?rest_route=\/wp\/v2\/posts\/765\/revisions"}],"predecessor-version":[{"id":773,"href":"https:\/\/loeilduse.fr\/index.php?rest_route=\/wp\/v2\/posts\/765\/revisions\/773"}],"wp:attachment":[{"href":"https:\/\/loeilduse.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/loeilduse.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/loeilduse.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}