# kaniko

**Repository Path**: erictor_admin/kaniko

## Basic Information

- **Project Name**: kaniko
- **Description**: kaniko测试使用的文件
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2023-07-06
- **Last Updated**: 2023-11-21

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# kubernetes kaniko Examples With jenkins

Builiding Docker images using kaniko on Kubernetes pods

Full Documenation: https://devopscube.com/build-docker-image-kubernetes-pod/

## Tech: Github + Dockerhub + Kubernetes

### Create Kube Secret
```
kubectl create secret \
    docker-registry regcred \
    --docker-server=https://index.docker.io/v1/ \
    --docker-username=$REGISTRY_USER \
    --docker-password=$REGISTRY_PASS \
    --docker-email=$REGISTRY_EMAIL
```
```
kubectl create secret docker-registry dockercred -n devops \
    --docker-server=http://172.100.3.111:888 \
    --docker-username=admin \
    --docker-password=Abc,123.\
    --docker-email=gouwqiang@163.com
```

# 1. 新建一个Dockerfile

```
cat > /apps/kaniko/demo/Dockerfile << EOF
FROM alpine
ENTRYPOINT ["/bin/sh", "-c", "echo hello"]
EOF
```



# 2. 新建cm和secret

```
kubectl create configmap kanikodockerfile --from-file=./Dockerfile
kubectl delete  secret dockerhub
kubectl create secret docker-registry dockerhub --docker-server=registry.cn-hangzhou.aliyuncs.com --docker-username=erictor888 --docker-password=Abc,123. --docker-email=gouwqiang@163.com
```

# 3.新建pod
本地挂载

```
cat kaniko.yaml 
apiVersion: v1
kind: Pod
metadata:
  name: kaniko
spec:
  containers:
  - name: kaniko
    image: registry.cn-hangzhou.aliyuncs.com/weiyigeek/kaniko-executor:latest
    env:
    - name: DOCKERHUB
      value: "registry.cn-hangzhou.aliyuncs.com"
    - name: AUTHOR
      value: "erictor888"
    - name: IMAGE_NAME
      value: "myappweb"
    - name: IMAGE_VERSION
      value: "v1"
    args: [ "--dockerfile=Dockerfile",
            "--context=dir://workspace",
            "--destination=registry.cn-hangzhou.aliyuncs.com/erictor888/myappweb:v2",
            "--cache",
            "--cache-dir=/cache"]
    volumeMounts:
      - name: kaniko-secret
        mountPath: /kaniko/.docker
      - name: dockerfile-storage
        mountPath: /workspace
      - name: kaniko-cache
        mountPath: /cache
  restartPolicy: Never
  nodeSelector:
    kubernetes.io/hostname: "k8s-node1"
  volumes:
    - name: kaniko-secret
      secret:
        secretName: dockerhub
        items:
          - key: .dockerconfigjson
            path: config.json
    - name: dockerfile-storage
      hostPath:
        path: /apps/kaniko/demo
        type: DirectoryOrCreate
    - name: kaniko-cache
      hostPath:
        path: /apps/kaniko/cache
        type: DirectoryOrCreate
```
nfs 挂载:
```
apiVersion: v1
kind: Pod
metadata:
  name: kaniko
spec:
  containers:
  - name: kaniko
    image: registry.cn-hangzhou.aliyuncs.com/weiyigeek/kaniko-executor:latest
    env:
    - name: DOCKERHUB
      value: "registry.cn-hangzhou.aliyuncs.com"
    - name: AUTHOR
      value: "erictor888"
    - name: IMAGE_NAME
      value: "myappweb"
    - name: IMAGE_VERSION
      value: "v1"
    args: [ "--dockerfile=Dockerfile",
            "--context=dir://workspace",
            "--destination=registry.cn-hangzhou.aliyuncs.com/erictor888/myappweb:v2",
            "--cache",
            "--cache-dir=/cache"]
    volumeMounts:
      - name: kaniko-secret
        mountPath: /kaniko/.docker
      - name: dockerfile-storage
        mountPath: /workspace
      - name: kaniko-cache
        mountPath: /cache
  restartPolicy: Never
  nodeSelector:
    kubernetes.io/hostname: "k8s-node1"
  volumes:
    - name: kaniko-secret
      secret:
        secretName: dockerhub
        items:
          - key: .dockerconfigjson
            path: config.json
    - name: dockerfile-storage
      nfs:
        path: /data/nfs/kaniko/Dockerfiles
        server: 172.100.3.111
    - name: kaniko-cache
      hostPath:
      nfs:
        path: /data/nfs/kaniko/cache
        server: 172.100.3.111

```
# 4.执行

```
[root@ha1 kaniko]# kubectl apply -f kaniko.yaml 
pod/kaniko created
[root@ha1 kaniko]# kubectl logs kaniko
INFO[0000] Retrieving image manifest alpine             
INFO[0000] Retrieving image alpine from registry index.docker.io 
INFO[0003] Retrieving image manifest alpine             
INFO[0003] Returning cached image manifest              
INFO[0004] Built cross stage deps: map[]                
INFO[0004] Retrieving image manifest alpine             
INFO[0004] Returning cached image manifest              
INFO[0004] Retrieving image manifest alpine             
INFO[0004] Returning cached image manifest              
INFO[0004] Executing 0 build triggers                   
INFO[0004] Building stage 'alpine' [idx: '0', base-idx: '-1'] 
INFO[0004] Skipping unpacking as no commands require it. 
INFO[0004] ENTRYPOINT ["/bin/sh", "-c", "echo hello"]   
INFO[0004] No files changed in this command, skipping snapshotting. 
INFO[0004] Pushing image to registry.cn-hangzhou.aliyuncs.com/erictor888/myappweb:v2 
INFO[0005] Pushed registry.cn-hangzhou.aliyuncs.com/erictor888/myappweb@sha256:978d699274b9c097b4c840cd322f70a1bd8b3a99c269c6e1dc84f3b40e16fc80 
```

# 5.本地配置

```
kubectl delete  secret kaniko-secret
kubectl create secret generic kaniko-secret --from-file=/root/.docker/config.json
kubectl delete  secret dockerhub
kubectl create secret docker-registry dockerhub --docker-server=http://172.100.3.111:888 --docker-username=admin --docker-password=Harbor12345
```



```
cat 2kaniko.yaml 
apiVersion: v1
kind: Pod
metadata:
  name: kaniko
spec:
  containers:
  - name: kaniko
    image: registry.cn-hangzhou.aliyuncs.com/erictor888/kaniko-executor:v1.9.0
    volumeMounts:
      - name: kaniko-secret
        mountPath: /kaniko/.docker/
      - name: dockerfile-storage
        mountPath: /workspace   
    args:
    - "--context=dir://workspace"
    - "--destination=172.100.3.111:888/eric/myappweb:v1"
    - "--dockerfile=Dockerfile"
    - "--insecure=true"
    - "--skip-tls-verify=true"
  restartPolicy: Never
  volumes:
    - name: kaniko-secret
      secret:
        secretName: kaniko-secret     
    - name: dockerfile-storage
      nfs:
        path: /data/nfs/kaniko/Dockerfiles
```

```
kubectl delete -f kaniko.yaml 
kubectl apply -f kaniko.yaml 
kubectl logs kaniko --follow
```

```
kubectl create secret docker-registry dockercred -n devops \
    --docker-server=http://172.100.3.111:888 \
    --docker-username=admin \
    --docker-password=Abc,123.\
    --docker-email=gouwqiang@163.com
```

https://gitee.com/erictor_admin/kaniko.git