|
| 1 | +# 使用 operator 部署 gitlab |
| 2 | + |
| 3 | +## operator 安装 |
| 4 | + |
| 5 | +```shell |
| 6 | +kubectl create namespace gitlab-system |
| 7 | +``` |
| 8 | + |
| 9 | +- gitlab-operator 地址 |
| 10 | + |
| 11 | +```shell |
| 12 | +https://gitlab.com/gitlab-org/cloud-native/gitlab-operator/-/releases?after=eyJyZWxlYXNlZF9hdCI6IjIwMjUtMDEtMTYgMTQ6Mjc6MjAuMTM5NTk0MDAwICswMDAwIiwiaWQiOiIxNTU1NjE4OSJ9 |
| 13 | +``` |
| 14 | + |
| 15 | +- Install-operator |
| 16 | + |
| 17 | +```shell |
| 18 | +[root@controller-node-1 ~]# kubectl apply -f gitlab-operator.yaml |
| 19 | +customresourcedefinition.apiextensions.k8s.io/gitlabs.apps.gitlab.com created |
| 20 | +serviceaccount/gitlab-app-nonroot created |
| 21 | +serviceaccount/gitlab-manager created |
| 22 | +serviceaccount/gitlab-nginx-ingress created |
| 23 | +serviceaccount/gitlab-prometheus-server created |
| 24 | +clusterrole.rbac.authorization.k8s.io/gitlab-app-role-nonroot created |
| 25 | +clusterrole.rbac.authorization.k8s.io/gitlab-metrics-auth-role created |
| 26 | +clusterrole.rbac.authorization.k8s.io/gitlab-metrics-reader created |
| 27 | +clusterrole.rbac.authorization.k8s.io/gitlab-manager-role created |
| 28 | +clusterrole.rbac.authorization.k8s.io/gitlab-nginx-ingress created |
| 29 | +clusterrole.rbac.authorization.k8s.io/gitlab-prometheus-server created |
| 30 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-app-rolebinding-nonroot created |
| 31 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-metrics-auth-rolebinding created |
| 32 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-manager-rolebinding created |
| 33 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-nginx-ingress created |
| 34 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-prometheus-server created |
| 35 | +role.rbac.authorization.k8s.io/gitlab-leader-election-role created |
| 36 | +role.rbac.authorization.k8s.io/gitlab-nginx-ingress created |
| 37 | +rolebinding.rbac.authorization.k8s.io/gitlab-leader-election-rolebinding created |
| 38 | +rolebinding.rbac.authorization.k8s.io/gitlab-nginx-ingress created |
| 39 | +service/gitlab-controller-manager-metrics-service created |
| 40 | +service/gitlab-webhook-service created |
| 41 | +deployment.apps/gitlab-controller-manager created |
| 42 | +ingressclass.networking.k8s.io/gitlab-nginx created |
| 43 | +validatingwebhookconfiguration.admissionregistration.k8s.io/gitlab-validating-webhook-configuration created |
| 44 | +resource mapping not found for name: "gitlab-serving-cert" namespace: "gitlab-system" from "gitlab-operator.yaml": no matches for kind "Certificate" in version "cert-manager.io/v1" |
| 45 | +ensure CRDs are installed first |
| 46 | +resource mapping not found for name: "gitlab-selfsigned-issuer" namespace: "gitlab-system" from "gitlab-operator.yaml": no matches for kind "Issuer" in version "cert-manager.io/v1" |
| 47 | +ensure CRDs are installed first |
| 48 | + |
| 49 | +# 安装报错,它依赖 cert-manager 组件,估计是跟 https 有关系 |
| 50 | + |
| 51 | +# 再次安装过了 |
| 52 | +[root@controller-node-1 ~]# kubectl apply -f gitlab-operator.yaml |
| 53 | +customresourcedefinition.apiextensions.k8s.io/gitlabs.apps.gitlab.com configured |
| 54 | +serviceaccount/gitlab-app-nonroot unchanged |
| 55 | +serviceaccount/gitlab-manager unchanged |
| 56 | +serviceaccount/gitlab-nginx-ingress unchanged |
| 57 | +serviceaccount/gitlab-prometheus-server unchanged |
| 58 | +clusterrole.rbac.authorization.k8s.io/gitlab-app-role-nonroot unchanged |
| 59 | +clusterrole.rbac.authorization.k8s.io/gitlab-metrics-auth-role unchanged |
| 60 | +clusterrole.rbac.authorization.k8s.io/gitlab-metrics-reader unchanged |
| 61 | +clusterrole.rbac.authorization.k8s.io/gitlab-manager-role unchanged |
| 62 | +clusterrole.rbac.authorization.k8s.io/gitlab-nginx-ingress unchanged |
| 63 | +clusterrole.rbac.authorization.k8s.io/gitlab-prometheus-server unchanged |
| 64 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-app-rolebinding-nonroot unchanged |
| 65 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-metrics-auth-rolebinding unchanged |
| 66 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-manager-rolebinding unchanged |
| 67 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-nginx-ingress unchanged |
| 68 | +clusterrolebinding.rbac.authorization.k8s.io/gitlab-prometheus-server unchanged |
| 69 | +role.rbac.authorization.k8s.io/gitlab-leader-election-role unchanged |
| 70 | +role.rbac.authorization.k8s.io/gitlab-nginx-ingress unchanged |
| 71 | +rolebinding.rbac.authorization.k8s.io/gitlab-leader-election-rolebinding unchanged |
| 72 | +rolebinding.rbac.authorization.k8s.io/gitlab-nginx-ingress unchanged |
| 73 | +service/gitlab-controller-manager-metrics-service unchanged |
| 74 | +service/gitlab-webhook-service unchanged |
| 75 | +deployment.apps/gitlab-controller-manager unchanged |
| 76 | +ingressclass.networking.k8s.io/gitlab-nginx unchanged |
| 77 | +certificate.cert-manager.io/gitlab-serving-cert created |
| 78 | +issuer.cert-manager.io/gitlab-selfsigned-issuer created |
| 79 | +validatingwebhookconfiguration.admissionregistration.k8s.io/gitlab-validating-webhook-configuration configured |
| 80 | +``` |
| 81 | +
|
| 82 | +## install-gitlab |
| 83 | +
|
| 84 | +```shell |
| 85 | +apiVersion: apps.gitlab.com/v1beta1 |
| 86 | +kind: GitLab |
| 87 | +metadata: |
| 88 | + name: gitlab |
| 89 | +spec: |
| 90 | + chart: |
| 91 | + version: "1.6.0" |
| 92 | + values: |
| 93 | + global: |
| 94 | + hosts: |
| 95 | + domain: mawb.gitlab.com |
| 96 | + ingress: |
| 97 | + configureCertmanager: true |
| 98 | + certmanager-issuer: |
| 99 | + |
| 100 | +``` |
| 101 | +
|
0 commit comments