Kubernetes|Kubernetes 中部署 Maven 私有仓库 Sonatype Nexus3 Kubernetes中部署Maven私有仓库S

背景： java程序员们想弄一个私有maven仓库，嗯正常的是用nexus or artfactory? artfactory是两三年前听jfrog的讲座知道的，程序说他原来用的nexus。那就搞一个nexus了。
基础环境参照：https://cloud.tencent.com/developer/article/1806089--kubernetes集群1.20.5版本（当然了进行了小版本升级1.21了，系列笔记中有提）
https://cloud.tencent.com/developer/article/1806896--网关层的代理traefik
https://cloud.tencent.com/developer/article/1806549--存储块腾讯云cbs
all on kubernetes 是个人的原则。就在kubernetes的环境上搭建一个私有maven仓库了。
1. nexus3 on kubernetes 注：不做特殊说明，工具类软件我都安装在kube-ops namespace命名空间下
1. 创建pv,pvc 嗯存储用的都是腾讯云的cbs存储

[root@sh-master-01 ~]# kubectl get storageclass NAMEPROVISIONERRECLAIMPOLICYVOLUMEBINDINGMODEALLOWVOLUMEEXPANSIONAGE cbs-csicom.tencent.cloud.csi.cbsDeleteImmediatefalse70d

cat pvc.yaml

apiVersion: v1 kind: PersistentVolumeClaim metadata: namespace： kube-ops name: sonatype-nexus labels: app: sonatype-nexusspec: accessModes: - ReadWriteOnce resources: requests: storage: 50Gi storageClassName: cbs-csi selector: matchLabels: app: sonatype-nexus

kubectl apply -f pvc.yaml

Kubernetes|Kubernetes 中部署 Maven 私有仓库 Sonatype Nexus3

文章图片

嗯好吧cbs-csi 不支持selector的标签....将就的用吧...腾讯一直讲自己今年的开源项目是最多的，但是如kubernetes-csi-tencentcloud这样的项目，三年了吧提交了issue也没有关闭呢也没有人回复。所以能用就行了...还是适应它吧......

kubectl delete -f pvc.yaml

cat pvc.yaml

apiVersion: v1 kind: PersistentVolumeClaim metadata: namespace: kube-ops name: sonatype-nexus labels: app: sonatype-nexusspec: accessModes: - ReadWriteOnce resources: requests: storage: 50Gi storageClassName: cbs-csi

kubectl apply -f pvc.yaml kubectl describe pvc sonatype-nexus -n kube-ops kubectl get pvc -n kube-ops

文章图片

2、部署 Sonatype Nexus3 cat nexus.yaml

apiVersion: v1 kind: Service metadata: name: sonatype-nexus labels: app: sonatype-nexus spec: type: ClusterIP ports: - name: sonatype-nexus port: 8081 targetPort: 8081 protocol: TCP selector: app: sonatype-nexus --- apiVersion: apps/v1 kind: Deployment metadata: name: sonatype-nexus labels: app: sonatype-nexus spec: replicas: 1 selector: matchLabels: app: sonatype-nexus template: metadata: labels: app: sonatype-nexus spec: containers: - name: sonatype-nexus image: sonatype/nexus3:3.30.0 imagePullPolicy: IfNotPresent ports: - name: server containerPort: 8081 livenessProbe:#存活探针 httpGet: path: / port: 8081 initialDelaySeconds: 30 periodSeconds: 30 failureThreshold: 6 readinessProbe:#就绪探针 httpGet: path: / port: 8081 initialDelaySeconds: 30 periodSeconds: 30 failureThreshold: 6 env: - name: INSTALL4J_ADD_VM_PARAMS#设置分配资源大小，一定要等于或小于resources设置的值 value: " -Xms1200M -Xmx1200M -XX:MaxDirectMemorySize=2G -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap " resources:#资源限制 limits: cpu: 1000m#推荐设置为4000m以上cpu，由于资源有限，所以都是设置的最小值 memory: 2048Mi requests: cpu: 500m memory: 1024Mi volumeMounts: - name: sonatype-nexus-data mountPath: /nexus-data volumes: - name: sonatype-nexus-data persistentVolumeClaim: claimName: sonatype-nexus#设置为上面创建的 PVC

[root@sh-master-01 qa]# kubectl get pods -n kube-ops NAMEREADYSTATUSRESTARTSAGE gitlab-b9d95f784-7h8dt1/1Running049d gitlab-redis-cd56f5cc9-g9gm81/1Running061d jenkins-02/2Running049d postgresql-5bd6b44d45-wzkwr1/1Running161d sonatype-nexus-5d98d78b86-nk75v0/1CrashLoopBackOff69m5s

查看报错如下：

文章图片

嗯权限不够咋整....嗯由于pvc只能挂载单个pod,先执行：

kubectl delete -f nexus.yaml -n kube-ops

然后修改nexus.yaml如下：
cat nexus.yaml

apiVersion: v1 kind: Service metadata: name: sonatype-nexus labels: app: sonatype-nexus spec: type: ClusterIP ports: - name: sonatype-nexus port: 8081 targetPort: 8081 protocol: TCP selector: app: sonatype-nexus --- apiVersion: apps/v1 kind: Deployment metadata: name: sonatype-nexus labels: app: sonatype-nexus spec: replicas: 1 selector: matchLabels: app: sonatype-nexus template: metadata: labels: app: sonatype-nexus spec: initContainers: - name: init image: busybox command: ["sh", "-c", "chown -R 200:200 /nexus-data"] volumeMounts: - name: sonatype-nexus-data mountPath: /nexus-data containers: - name: sonatype-nexus image: sonatype/nexus3:3.30.0 imagePullPolicy: IfNotPresent ports: - name: server containerPort: 8081 livenessProbe:#存活探针 httpGet: path: / port: 8081 initialDelaySeconds: 30 periodSeconds: 30 failureThreshold: 6 readinessProbe:#就绪探针 httpGet: path: / port: 8081 initialDelaySeconds: 30 periodSeconds: 30 failureThreshold: 6 env: - name: INSTALL4J_ADD_VM_PARAMS#设置分配资源大小，一定要等于或小于resources设置的值 value: " -Xms1200M -Xmx1200M -XX:MaxDirectMemorySize=2G -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap " resources:#资源限制 limits: cpu: 1000m#推荐设置为4000m以上cpu，由于资源有限，所以都是设置的最小值 memory: 2048Mi requests: cpu: 500m memory: 1024Mi volumeMounts: - name: sonatype-nexus-data mountPath: /nexus-data volumes: - name: sonatype-nexus-data persistentVolumeClaim: claimName: sonatype-nexus#设置为上面创建的 PVC

[root@sh-master-01 nexus]# kubectl apply -f nexus.yaml -n kube-ops service/sonatype-nexus created deployment.apps/sonatype-nexus created [root@sh-master-01 nexus]# kubectl get pods -n kube-ops NAMEREADYSTATUSRESTARTSAGE gitlab-b9d95f784-7h8dt1/1Running049d gitlab-redis-cd56f5cc9-g9gm81/1Running061d jenkins-02/2Running049d postgresql-5bd6b44d45-wzkwr1/1Running161d sonatype-nexus-79f85cc57c-scb9b0/1Init:0/1028s [root@sh-master-01 nexus]# kubectl get pods -n kube-ops NAMEREADYSTATUSRESTARTSAGE gitlab-b9d95f784-7h8dt1/1Running049d gitlab-redis-cd56f5cc9-g9gm81/1Running061d jenkins-02/2Running049d postgresql-5bd6b44d45-wzkwr1/1Running161d sonatype-nexus-79f85cc57c-scb9b0/1PodInitializing02m

kubectl describe pods sonatype-nexus-79f85cc57c-scb9b -n kube-ops

文章图片

嗯可以running了
然后获取一下用户名密码：

文章图片

3. ingress代理对外暴露应用做一个ingress 代理？
cat ingress.yaml

apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: nexus-ingress namespace: kube-ops annotations: nginx.ingress.kubernetes.io/rewrite-target: / kubernetes.io/ingress.class: traefik traefik.ingress.kubernetes.io/router.entrypoints: web nginx.ingress.kubernetes.io/ssl-redirect: 'true'spec: rules: - host: nexus.sainaihe.com http: paths: - pathType: Prefix path: / backend: service: name: sonatype-nexus port: number: 8081

kubectl apply -f ingress.yaml

4. 浏览器访问 nexus服务，并修改nexus初始密码：

文章图片

文章图片

嗯跨域了可咋整？我的两个主域名都泛域名强制跳转https了，短时间没有想好怎么解决....我就直接用了另外一个单独域名。不强跳可以直接访问了。同理我是不是可以加一个https的单独的设置....有时间了再试一下。先跑通一下nexus的代理应用......
http访问：
如下。第一次是要修改密码的关于初始密码的获取可以参照：1.2中获取初始密码的方式