标签:psc inf 导出 com dap reference div 服务器 xss
同事的jenkins 链接自己的 k8s 总是出问题 给出了资料和服务器 进行处理。
同时给出的参考资料:https://blog.csdn.net/diantun00/article/details/81180694
这边用自己的服务器简单进行了测试。
jenkins的地址
http://10.24.101.161:8080/configure
k8s 集群的
https://10.24.103.1:6443
1. 验证jenkins 已经添加了 kubernetes 的插件
如果没有的话自行安装
然后 进行系统配置
拖到最后面 添加一个云
我的k8s 是使用 kubeadm 直接 安装的 比较简单, 根据 作者的说法进行处理
进入 kubernetes的配置目录
cd /etc/kubernetes
查看 admin.conf
cat admin.conf
我这边的内容为:
反正是测试服务器---说不定明天我就删了-- 证书 密钥 无所谓。。。
apiVersion: v1 clusters: - cluster: certificate-authority-data: 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 server: https://10.24.103.1:6443 name: kubernetes contexts: - context: cluster: kubernetes user: kubernetes-admin name: kubernetes-admin@kubernetes current-context: kubernetes-admin@kubernetes kind: Config preferences: {} users: - name: kubernetes-admin user: client-certificate-data: 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 client-key-data: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb3dJQkFBS0NBUUVBc3RnYmNnRDdUMkFYdXN1dEg4T2IxUHZmOG5hdUdVTVRhaE9iMFVVYXhJMnVqYkVjCm90ZTdTZkM0ZjhRQWF3R2VVZzVDKzlldVFHZzJGMFRTYTQ5RytRemNsWEF1MkhZeHMrU0Z3K1RmemVoR1ZjaUEKZThXSFF0dmphMDh1TkpDem9BZjdTbTFkL243SVNVMExVK3pscUh6TTN2MHpSTkFqbElrU3JYRUdreHFaejBjZQplU3N6S1RlYUtRVDBJaHg1eDFaUE0rcWh1RktGRjdkUWJkZ210RUs4RytkbXlBcS9WYlhHbmQ3U3lzTnNvb0tJClJVejV4KytjWGNIYkxqUzdYYW1EUXlFbmtzYWRIK2VLWVJ4MGVlZThKNTliTTlOdHE5SnpjUW9vRDJydW9FSjEKcXZhOENWMDZXaXk5OExzbnRkenVqckVRK2pWd25aT1A0M1BVa3dJREFRQUJBb0lCQUd1OEFUUjQ0T3JjOFE2RwptV0MwSGhCOE5sakNJM2gyVHFDczlVVm9Rb3E2NnJiU1JYVFhUaXhwaFVyNkVHSmxsRERNQkkvZlNrbmtQUWxoClhQeU1UKzNCVUxQNDQwOWtTK2FaTi9kY3pYRWxoaEV3K2kwVlBia0o2d0orclUvZkIwWFU2UXpadXpDT3dTcGUKN2Y3OWl3OG5OdWJ4VWt3V3NnaE5WbUlDM3pvSFhuMHZZYnRub3l5T3RFeWdiRFJYdWIrMWFJc21RQ3NPQnVoSQp0bWZ4QU1ockRXWTRoVXVoMXYrOUVLLzlkYldxNE5SdkhtYmE3cEdnWTJaNVN4alZ1R2Y1Nkl5ZVBuSGNxZmwzCmtsOTJTOHFJUFdaOEdZMGZmd2pOQWlabzVBUFBLRGxWUk9xTUIwQTY1TUZqSlJ0VUFxYmsyOTVUaGI5Q1c4VFUKWkNkOGRsa0NnWUVBNk95SU9lUXV1NHNVSXNSTk11bjN3QVVoZHZndGRLd2d0dWtlamdvTUx5RWkwaWdhQ3V5SQowbldQY0k3Slk0dC94cmZTcXVwZE5vZDVRN3ZnZmY4eGdxMjB6WWxPTDIzbkZlK3ZwVktPWVgzb2NsREFla2NKCkhWQlBRcjlEQVRLdjFkVkQ0V3EzODVjS2twcjlCNGhQb1ZNb2NvRkoxU05xMFV4N05SdktBNDBDZ1lFQXhJLzkKNk0rc3RneUJQVFRLL3NqSG9LeUZlSWFOTUZ2MWFNMU13M0wwYXorTjA1L2t6MHlmSHVmcTc0MWVIVVVPdTFBOQpqUnFNMmp4UUFPRUkweUR2bmdxWm9kajd0NTNTRXVvbWM5MG9rK2NzNkRSaE9QYUpQM0FGeEtKN0Y4TUp6aFVSCjJXd0FzN3ZJelY0cW9jcHM1bGZkdllGYkdDZ04xdzVVZ1NzeUlKOENnWUVBdi83QTU1OU1XakR4SHh0YVd4NTYKcHFCVURtSFI3anM0R0MyZWp3eC9NSllLd3RwbFpSM0dSbHk3S05lNTcwRDh5VXVhN21HVEJqQ3paMzdGTkhhWApWQlZsVklyYWxNUHQyS29peVk1OGFLWkZaWDFrdXlZMHdDSUR3NHd1YWgxaXpVc20wZmVLdTlLRDE0YkVEV0p4CjZSUEg0bUxwL2pOY2lEdVh6NVloZGIwQ2dZQk1GZENiQllnOUQ2b1hIeEJVZnpPR3BrRWozakZZdnIvSHlYQWwKVjZIMHdhME1kYUFEL2d5NTBkdkd6bG5YeXB0aE5qWWRJR0hWTi9OZjQ3dWV2ZWtDcStlOEZsbVpRYVhIWEl0MQozZTJQRXJUM1RRODFGWGthN1NuT2EzWnFSRHpQWUtpQUdLWk03Q3RXRTFVOU96WGNFN2JwVytEL0FNSWF0SmxSClJuOG8wUUtCZ0N5bm84VFlwZTlEUXZ4dE5mZDhNMlBPTi9lbDAvcTdVUGRoZmFJUUFraG5JNjRvT3lxbWs3YTUKemZ3VisyYWswUlR0bVdRaE9DQTd1TnE5NVJpY01LaHlEQlBhQ2k1czRsT0dwd0FPVE8wOVM0emczQXlnbjFMMwpvUklZOEREckZ6dEVuM01mN2ZqVndDVlhkTGdWMVl0dW1OajVieGw1YXdyQnorSkxuZ0VYCi0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==
将 三个内容进行处理。 转换成相应的内容
echo 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 |base64 -d >ca.crt
原作者写的更好, 这里直接copy了
用到上面提到的kubernetes的配置文件
文件中有三个值 certificate-authority-data 、client-certificate-data 、 client-key-data
解码它们获得证书 ,注意将上面的值替换称自己的一大长传字符串
echo certificate-authority-data | base64 -d > ca.crt echo client-certificate-data | base64 -d > client.crt echo client-key-data | base64 -d > client.key
然后根据如上内容生成客户端认账的 证书
openssl pkcs12 -export -out cert.pfx -inkey client.key -in client.crt -certfile ca.crt
注意导出时收入输入密码。
这里完整的复制的原作者的内容 openssl 的使用虽然之前学过 但是太不精通了。。
然后k8s 里面进行处理
将 ca.crt base64 解码之后的证书内容放进来
如图示
然后添加jenkins的证书
选择 证书
然后 上传 文件 输入导出时的密码
然后 进行测试
能够成功。
管理jenkins的凭据
不知道怎么删除。。。
标签:psc inf 导出 com dap reference div 服务器 xss
原文地址:https://www.cnblogs.com/jinanxiaolaohu/p/9412324.html