Spinnaker 高可用安装构思与实践

一、 准备环境

二、 安装hal

sudo bash InstallHalyard.sh

三、安装minio集群

安装完成以后，配置systemd管理方式

vim /lib/systemd/system/minio.service

chmod +x /lib/systemd/system/minio.service

!/bin/bash

chmod +x /opt/minio/run.sh

四、开始安装spinnaker

echo $MINIO_SECRET_KEY | hal config storage s3 edit --endpoint$ENDPOINT \
–access-key-id $MINIO_ACCESS_KEY \
–secret-access-key # will be read on STDIN to avoid polluting your

~/.bash_history with a secret

顺利的话，多试几遍是能成功的，不顺利的话，就试更多遍

五、配置与K8S的连接

六、安装另外一台高可用的节点

七、配置IP访问spinnaker

八、后续同步方案

currentDeployment: default deploymentConfigurations: - name: default version: 1.9.3 providers: appengine: enabled: false accounts: [] aws: enabled: false accounts: [] bakeryDefaults: baseImages: [] defaultKeyPairTemplate: '{ 
   {name}}-keypair' defaultRegions: - name: us-west-2 defaults: iamRole: BaseIAMRole ecs: enabled: false accounts: [] azure: enabled: false accounts: [] bakeryDefaults: templateFile: azure-linux.json baseImages: [] dcos: enabled: false accounts: [] clusters: [] dockerRegistry: enabled: true accounts: - name: my-docker-harbor requiredGroupMembership: [] permissions: {} address: http://harbor-test-01.cloudplay.com:5006 username: admin password: test01.Harbor12345.. email: admin@example.com cacheIntervalSeconds: 30 clientTimeoutMillis: 60000 cacheThreads: 1 paginateSize: 100 sortTagsByDate: false trackDigests: false insecureRegistry: true repositories: [] primaryAccount: my-docker-harbor google: enabled: false accounts: [] bakeryDefaults: templateFile: gce.json baseImages: [] zone: us-central1-f network: default useInternalIp: false kubernetes: enabled: true accounts: - name: k8s-test requiredGroupMembership: [] providerVersion: V2 permissions: {} dockerRegistries: [] context: kubernetes configureImagePullSecrets: true cacheThreads: 1 namespaces: [] omitNamespaces: [] kinds: [] omitKinds: [] customResources: [] cachingPolicies: [] kubeconfigFile: /home/ubuntu/.kube/config oauthScopes: [] oAuthScopes: [] primaryAccount: k8s-test openstack: enabled: false accounts: [] bakeryDefaults: baseImages: [] oracle: enabled: false accounts: [] deploymentEnvironment: size: SMALL type: LocalDebian updateVersions: true consul: enabled: false vault: enabled: false customSizing: {} gitConfig: upstreamUser: spinnaker haServices: clouddriver: enabled: false echo: enabled: false persistentStorage: persistentStoreType: s3 azs: {} gcs: rootFolder: front50 redis: {} s3: bucket: spin-902c1037-ff43-4240-85a6-08f7d0db2923 rootFolder: front50 endpoint: http://172.16.2.109:9001 accessKeyId: minio secretAccessKey: minio123 oracle: {} features: auth: false fiat: false chaos: false entityTags: false jobs: false artifacts: true metricStores: datadog: enabled: false prometheus: enabled: false add_source_metalabels: true stackdriver: enabled: false period: 30 enabled: false notifications: slack: enabled: false timezone: America/Los_Angeles ci: jenkins: enabled: false masters: [] travis: enabled: false masters: [] wercker: enabled: false masters: [] security: apiSecurity: ssl: enabled: false overrideBaseUrl: http://172.16.2.109:8084 uiSecurity: ssl: enabled: false overrideBaseUrl: http://172.16.2.109:9000 authn: oauth2: enabled: false client: {} resource: {} userInfoMapping: {} saml: enabled: false ldap: enabled: false url: ldap://172.16.2.94/dc=cloudplayer-int,dc=haima,dc=me userDnPattern: uid={ 
  0},uid=users x509: enabled: false iap: enabled: false enabled: false authz: groupMembership: service: EXTERNAL google: roleProviderType: GOOGLE github: roleProviderType: GITHUB file: roleProviderType: FILE ldap: roleProviderType: LDAP enabled: false artifacts: bitbucket: enabled: false accounts: [] gcs: enabled: false accounts: [] github: enabled: false accounts: [] gitlab: enabled: false accounts: [] http: enabled: false accounts: [] s3: enabled: false accounts: [] pubsub: google: enabled: false subscriptions: [] canary: enabled: false serviceIntegrations: - name: google enabled: false accounts: [] gcsEnabled: false stackdriverEnabled: false - name: prometheus enabled: false accounts: [] - name: datadog enabled: false accounts: [] - name: aws enabled: false accounts: [] s3Enabled: false reduxLoggerEnabled: true defaultJudge: NetflixACAJudge-v1.0 stagesEnabled: true templatesEnabled: true showAllConfigsEnabled: true