{"id":5986,"date":"2021-12-17T11:49:50","date_gmt":"2021-12-17T03:49:50","guid":{"rendered":"https:\/\/www.gycysygg.icu\/?p=5986"},"modified":"2022-01-21T16:19:33","modified_gmt":"2022-01-21T08:19:33","slug":"user","status":"publish","type":"post","link":"https:\/\/blog.ywdevops.cn\/index.php\/2021\/12\/17\/user\/","title":{"rendered":"k8s\u4e4b\u7528\u6237\u548c\u7528\u6237\u7ec4"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u5728k8s\u4e2d\u540c\u6837\u4e5f\u6709\u7528\u6237\u548c\u7ec4\u7684\u6982\u5ff5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u65b0\u5efa\u4e00\u4e2ak8s\u7528\u6237\u5927\u6982\u53ef\u4ee5\u5206\u4e3a\u4ee5\u4e0b\u51e0\u6b65\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>\u751f\u6210\u7528\u6237\u7684\u8bc1\u4e66key<\/li><li>\u901a\u8fc7\u7528\u6237\u7684\u8bc1\u4e66key\uff0c\u751f\u6210\u7528\u6237\u7684\u8bc1\u4e66\u8bf7\u6c42<\/li><li>\u901a\u8fc7k8s\u7684api\u7684ca\u8bc1\u4e66\u53bb\u7b7e\u53d1\u7528\u6237\u7684\u8bc1\u4e66\u8bf7\u6c42\uff0c\u751f\u6210\u7528\u6237\u7684\u8bc1\u4e66<\/li><li>\u914d\u7f6ekubectl config<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u5177\u4f53\u64cd\u4f5c\u5982\u4e0b\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1\u3001\u521b\u5efa\u7528\u6237\u8bc1\u4e66key\uff0c \u6267\u884c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>(umask 077; openssl genrsa -out guan.key 2048)<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"706\" height=\"406\" src=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/5-4.png\" alt=\"\" class=\"wp-image-6364\" srcset=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/5-4.png 706w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/5-4-300x173.png 300w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/5-4-600x345.png 600w\" sizes=\"auto, (max-width: 706px) 100vw, 706px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">2\u3001\u521b\u5efa\u7528\u6237\u8bc1\u4e66\u8bf7\u6c42\uff0c&#8211;subj\u5236\u5b9a\u7ec4\u548c\u7528\u6237\uff0c0\u662f\u7ec4\u540d\uff0cCN\u662f\u7528\u6237\u540d\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openssl req -new -key guan.key -out guan.csr -subj \"\/O=Guan\/CN=guan\"<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"709\" height=\"250\" src=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/6-4.png\" alt=\"\" class=\"wp-image-6367\" srcset=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/6-4.png 709w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/6-4-300x106.png 300w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/6-4-600x212.png 600w\" sizes=\"auto, (max-width: 709px) 100vw, 709px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u6ce8\u610f\uff1a\u5982\u679c\u63d0\u793a\u5982\u4e0b\u9519\u8bef\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Can't load \/root\/.rnd into RNG\n140247102853568:error:2406F079:random number generator:RAND_load_file:Cannot open file:..\/crypto\/rand\/randfile.c:88:Filename=\/root\/.rnd\n\n\n\u89e3\u51b3\u529e\u6cd5\uff1a\ncd \/root\nopenssl rand -writerand .rnd\n\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">3\u3001\u4f7f\u7528k8s\u7684ca\u7b7e\u53d1\u7528\u6237\u8bc1\u4e66\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openssl x509 -req -in guan.csr -CA \/etc\/kubernetes\/pki\/ca.crt -CAkey \/etc\/kubernetes\/pki\/ca.key -CAcreateserial -out guan.crt -days 3650<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">4\u3001\u7528\u6237\u914d\u7f6e\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>kubectl config set-credentials guan --client-certificate=guan.crt --client-key=guan.key --embed-certs=true<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">5\u3001\u4e0a\u4e0b\u6587(context)\u8bbe\u7f6e,\u9ed8\u8ba4\u7684\u547d\u540d\u7a7a\u95f4\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>kubectl config set-context guan@kubernetes --cluster=kubernetes --user=guan<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">6\u3001\u5207\u6362\u7528\u6237\uff0c\u4f46\u662f\u53ef\u4ee5\u53d1\u73b0\u6ca1\u6709\u4efb\u4f55\u6743\u9650\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>kubectl config use-context guan@kubernetes<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"707\" height=\"251\" src=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/7-3.png\" alt=\"\" class=\"wp-image-6377\" srcset=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/7-3.png 707w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/7-3-300x107.png 300w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/7-3-600x213.png 600w\" sizes=\"auto, (max-width: 707px) 100vw, 707px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">7\u3001\u67e5\u770b\u5f53\u524d\u4e0a\u4e0b\u6587(context)\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"707\" height=\"116\" src=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/9-2.png\" alt=\"\" class=\"wp-image-6380\" srcset=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/9-2.png 707w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/9-2-300x49.png 300w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/9-2-600x98.png 600w\" sizes=\"auto, (max-width: 707px) 100vw, 707px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">8\u3001\u67e5\u770b\u6240\u6709\u7684\u4e0a\u4e0b\u6587(context)\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"708\" height=\"132\" src=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/10-2.png\" alt=\"\" class=\"wp-image-6383\" srcset=\"https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/10-2.png 708w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/10-2-300x56.png 300w, https:\/\/blog.ywdevops.cn\/wp-content\/uploads\/2022\/01\/10-2-600x112.png 600w\" sizes=\"auto, (max-width: 708px) 100vw, 708px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u56fe\u4e2d\u7684kubernetes-admin@kubernetes\u4e3ak8s\u5b89\u88c5\u540e\u9ed8\u8ba4\u7684\u4e0a\u4e0b\u6587\uff0c\u4e5f\u662f\u6700\u5927\u6743\u9650\u7684<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528\u6237\u521b\u5efa\u5b8c\u6210\u540e\uff0c\u5373\u53ef\u8fdb\u884c\u7528\u6237\u6388\u6743\uff0c\u76ee\u524d\u5e38\u7528\u7684\u5c31\u662fRBAC&#8211;\u57fa\u4e8e\u89d2\u8272\u7684\u6388\u6743\u673a\u5236<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>\u67d0\u4e2a\u7528\u6237\u5c5e\u4e8e\u67d0\u4e2a\u89d2\u8272<\/li><li>\u67d0\u4e2a\u89d2\u8272\u62e5\u6709\u67d0\u4e9b\u64cd\u4f5c<\/li><li>\u67d0\u4e9b\u64cd\u4f5c\u677f\u9876\u5230\u67d0\u4e9b\u8d44\u6e90\u4e0a<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u6700\u7ec8\u7684\u7ed3\u679c\u5c31\u662f\uff1a\u67d0\u4e2a\u7528\u6237\u5bf9\u67d0\u4e9b\u8d44\u6e90\u5177\u6709\u67d0\u4e9b\u6743\u9650\uff0c\u8be6\u7ec6\u4f7f\u7528\u53ef\u53c2\u8003k8s\u4e4brbac\u6743\u9650\u63a7\u5236<a href=\"https:\/\/blog.ywdevops.cn\/index.php\/2021\/12\/17\/rbac\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/blog.ywdevops.cn\/index.php\/2021\/12\/17\/rbac\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5728k8s\u4e2d\u540c\u6837\u4e5f\u6709\u7528\u6237\u548c\u7ec4\u7684\u6982\u5ff5 \u65b0\u5efa\u4e00\u4e2ak8s\u7528\u6237\u5927\u6982\u53ef\u4ee5\u5206\u4e3a\u4ee5\u4e0b\u51e0\u6b65\uff1a \u751f\u6210\u7528\u6237\u7684\u8bc1\u4e66key \u901a\u8fc7\u7528\u6237\u7684\u8bc1 [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":5987,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[93,23],"tags":[],"class_list":["post-5986","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kubernetes","category-rong"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/posts\/5986","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/comments?post=5986"}],"version-history":[{"count":13,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/posts\/5986\/revisions"}],"predecessor-version":[{"id":6389,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/posts\/5986\/revisions\/6389"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/media\/5987"}],"wp:attachment":[{"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/media?parent=5986"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/categories?post=5986"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/tags?post=5986"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}