johnniang
你好, 我这边使用 [kubeconfigFile(credentialsId: ‘kubeconfig’ variable: ‘KUBECONFIG’)]) 出现问题导致无法正常运行
我的环境是 AWS EKS 2个 node 8c16g, kubesphere 版本 v3.2.1, Kubernetes 版本 v1.21.x
使用
stage('部署到gray环境') {
agent none
steps {
container('nodejs') {
sh 'kubectl version --short --client'
withCredentials([kubeconfigContent(credentialsId : 'kubeconfig-id' ,variable : 'KUBECONFIG_CONTENT' ,)]) {
sh '''mkdir ~/.kube
echo "$KUBECONFIG_CONTENT" > ~/.kube/config
envsubst < deployment.yaml | kubectl apply -f -'''
}
}
}
}
+ mkdir /root/.kube
+ echo 'apiVersion: v1
clusters:
- cluster:
certificate-authority-data: LS0tL*******************************QW==
server: https://10.100.0.1:443
name: local
contexts:
- context:
cluster: local
namespace: default
user: project-regular
name: project-regular@local
current-context: project-regular@local
kind: Config
preferences: {}
users: null
'
+ envsubst
+ kubectl apply -f -
Please enter Username: Please enter Password: error: error reading input for Password
script returned exit code 1
问题1: 使用kubeconfigFile(), 图形界面编辑时候, 点编辑无法弹出编辑窗口
stage('部署到gray环境') {
agent none
steps {
container('nodejs') {
sh 'kubectl version --short --client'
withCredentials([kubeconfigFile(credentialsId: 'kubeconfig', variable: 'KUBECONFIG')]) {
sh 'envsubst < deployment.yaml | kubectl apply -f -'
}
}
}
}
问题2: 使用kubeconfigFile(), 设置 variable 提示输入用户名密码
+ envsubst
+ kubectl apply -f -
Please enter Username: Please enter Password: error: error reading input for Password
script returned exit code 1
问题3: 使用 kubeconfigFile 不设置 variable 异常,
+ envsubst
+ kubectl apply -f -
Error from server (Forbidden): error when retrieving current configuration of:
Resource: "apps/v1, Resource=deployments", GroupVersionKind: "apps/v1, Kind=Deployment"
Name: "h5-page-v1", Namespace: "h5"
from server for: "STDIN": deployments.apps "h5-page-v1" is forbidden: User "system:serviceaccount:kubesphere-devops-worker:default" cannot get resource "deployments" in API group "apps" in the namespace "h5-page"
Error from server (Forbidden): error when retrieving current configuration of:
Resource: "/v1, Resource=services", GroupVersionKind: "/v1, Kind=Service"
Name: "h5-page", Namespace: "h5"
from server for: "STDIN": services "h5-page" is forbidden: User "system:serviceaccount:kubesphere-devops-worker:default" cannot get resource "services" in API group "" in the namespace "h5-page"
script returned exit code 1
