K8S nexus3.yaml文件

kind: Service
apiVersion: v1
metadata:name: qian-nexus3namespace: defaultlabels:app: qian-nexus3
spec:type: NodePortselector:app: qian-nexus3ports:#服务端口，内部端口，通过暴露端口登录的最终会转到内部- port: 8081name: resttargetPort: 8081protocol: TCP#登录平台暴露的端口nodePort: 31234#服务端口，内部端口- port: 8087name: rest1targetPort: 8087protocol: TCP#docker login暴露的端口nodePort: 31235
---apiVersion: apps/v1
kind: Deployment
metadata:name: qian-nexus3namespace: default
spec:replicas: 1minReadySeconds: 120strategy:type: RollingUpdaterollingUpdate:maxSurge: 1 maxUnavailable: 1 selector:matchLabels:app: qian-nexus3template:metadata:labels:app: qian-nexus3spec:containers:- name: qian-nexus3image: sonatype/nexus3:latestimagePullPolicy: Alwaysresources:limits:cpu: 1024mmemory: 2048Mirequests:cpu: 50mmemory: 200MilivenessProbe:failureThreshold: 3initialDelaySeconds: 180periodSeconds: 10successThreshold: 1tcpSocket:port: 8081timeoutSeconds: 2ports:- containerPort: 8081name: restprotocol: TCP- containerPort: 8087name: rest1protocol: TCPvolumeMounts:- mountPath: /nexus-dataname: devsecurityContext:privileged: truednsPolicy: ClusterFirstnodeName: node-2volumes:- hostPath:path: /srv/nexus/qian-dataname: dev

镜像源服务器操作：

mkdir -p  /srv/nexus/qian-data
chmod 777 /srv/nexus/qian-data
chown 200 /srv/nexus/qian-data

master管理服务器操作：

kubectl apply -f nexus3.yaml.yaml

注释：

- containerPort: 8087    ##容器端口name: rest1protocol: TCP
------------------------------------ port: 8087         ##容器端口name: rest1targetPort: 8087   protocol: TCPnodePort: 31235     ##集群外部访问Service，Pod提供访问接入端口，仅在type为NodePort时才需要指定.

访问nexus3

http://192.168.123.12:31234
登录用户admin
密码看提示路径，进入路径后文件中则为密码

设置私有仓库步骤：

1、设置
2、Repositories
3、Create repository
4、docker(hosted)

继上一步配置步骤docker(hosted)

1、Name                              （自定义名称）
2、http   8087                       （勾选http,填写内部上传端口）
3、Docker Registry API Support       （勾选 Allow clients to use the V1 API to interact with this repository）
4、Create repository                  （创建）

测试本地推镜像（哪台需要dockers login哪台就配置）

vi /lib/systemd/system/docker.service
修改为：镜像源ip和上传端口
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock   --insecure-registry=192.168.123.12:31235
sudo systemctl daemon-reload
sudo systemctl restart docker
docker login IP:31234
用户名：
密码：

docker打标签：

sudo docker tag  300e315adb2f  192.168.123.12:31235/nginx:v5.6
docker login IP:8087
账号
密码docker push   192.168.123.12:31235/nginx:v5.6
docker pull   192.168.123.12:31235/nginx:v5.6