ci时报错certificate is valid for ingress.local

[TimeBye]

请执行以下命令,注意替换第二条命令中的值，将所得到的信息粘贴出来一下，谢谢。

kubectl get  ingress --all-namespaces

kubectl get ingress [harbor ingress name] -n  [harbor namespace] -o yaml

[notsaltfish]

执行 kubectl get ingress --all-namespaces

执行 kubectl get ingress choerodon-harbor-harbor-ingress -n choerodon-devops-dev -o yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    ingress.kubernetes.io/proxy-body-size: "0"
    ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/proxy-body-size: "0"
  creationTimestamp: 2018-07-17T04:30:32Z
  generation: 1
  labels:
    app: harbor
    chart: harbor-0.1.2
    heritage: Tiller
    release: choerodon-harbor
  name: choerodon-harbor-harbor-ingress
  namespace: choerodon-devops-dev
  resourceVersion: "2211431"
  selfLink: /apis/extensions/v1beta1/namespaces/choerodon-devops-dev/ingresses/choerodon-harbor-harbor-ingress
  uid: 244617f3-897a-11e8-9b06-0297889229db
spec:
  rules:
  - host: registry.example.choerodon.io
    http:
      paths:
      - backend:
          serviceName: choerodon-harbor-harbor-ui
          servicePort: 80
        path: /
      - backend:
          serviceName: choerodon-harbor-harbor-registry
          servicePort: 5000
        path: /v2
  - host: notary-registry.example.choerodon.io
    http:
      paths:
      - backend:
          serviceName: notary-server
          servicePort: 4443
        path: /
status:
  loadBalancer:
    ingress:
    - {}

[TimeBye]

请告知一下 你这个Harbor是如何安装的 你有需改过Harbor的ingress吗

[notsaltfish]

使用一键部署安装的，我记得没有修改过ingress

[TimeBye]

那现在只能试一试了哈 ，修改 ingress

kubectl edit ingress choerodon-harbor-harbor-ingress -n choerodon-devops-dev

然后添加tls相关属性

···
  - host: notary-registry.example.choerodon.io
    http:
      paths:
      - backend:
          serviceName: notary-server
          servicePort: 4443
        path: /
  tls:
  - hosts:
    - registry.example.choerodon.io
    - notary-registry.example.choerodon.io
    secretName: harbor-cert
···

[notsaltfish]

还是同样的错误

我查看我的pod，有一个状态不正常，会不会跟这个有关系

[TimeBye]

这个不影响哈 这个是扫描镜像漏洞的 不影响docker login

[notsaltfish]

那刚才那个登录输出的还是那个信息，应该怎么解决？

[TimeBye]

建议你按Harbor安装文档手动安装一次Harbor

http://choerodon.io/zh/docs/installation-configuration/steps/parts/base/harbor/

安装前请删除已安装的Harbor

[TimeBye]

文档中部署harbor的命令仓库名有误，下面是修正后的命令：

部署harbor

helm install c7n/harbor \
    --set externalDomain=registry.example.choerodon.io \
    --set harborAdminPassword=Harbor12345 \
    --set adminserver.volumes.config.selector.pv="harbor-adminserver-pv" \
    --set database.internal.volumes.config.selector.pv="harbor-harbor-db-pv" \
    --set registry.volumes.config.selector.pv="harbor-registry-pv" \
    --name=harbor --namespace=choerodon-devops-prod

[notsaltfish]

好的，我试一下，非常感谢！