kubernetes ImagePullSecret的創建與使用

創建secret

kubectl create secret docker-registry <secret名稱(docker-image-secret)> --namespace=<命名空間名稱> --docker-username=<鏡像倉庫用戶名> --docker-password=<鏡像倉庫密碼> --docker-server=<鏡像倉庫地址> 

創建serviceaccount關聯secret

apiVersion: v1
kind: ServiceAccount
metadata:
  name: docker-image
  namespace: default
imagePullSecrets:
- name: docker-image-secret

創建測試文件

apiVersion: apps/v1
kind: Deployment
metadata:
  name: docker-image-test
spec:
  selector:
    matchLabels:
      app: docker-image-test
  replicas: 2
  template:
    metadata:
      labels:
        app: docker-image-test
    spec:
      terminationGracePeriodSeconds: 3
      serviceAccount: docker-image
      containers:
      - name: docker-image-test
        image: hub.baidubce.com/my_image/ccreate-bi:202006021528
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 80
          name: docker-image-test

• 也可以直接綁定secret

apiVersion: apps/v1
kind: Deployment
metadata:
  name: docker-image-test
spec:
  selector:
    matchLabels:
      app: docker-image-test
  replicas: 2
  template:
    metadata:
      labels:
        app: docker-image-test
    spec:
      terminationGracePeriodSeconds: 3
      imagePullSecrets:
      - name: base-image
      containers:
      - name: docker-image-test
        image: hub.baidubce.com/my_image/ccreate-bi:202006021528
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 80
          name: docker-image-test

創建pod查看

kubectl apply docker-image-test.yaml

• 通過describe pod可查看鏡像下載是否成功