未验证 提交 d6f7f692 编写于 作者: M Medya Ghazizadeh 提交者: GitHub

Merge pull request #10385 from michaelhenkel/10214

 adding insecure registry support to containerd runtime
......@@ -98,6 +98,10 @@ oom_score = 0
[plugins.cri.registry.mirrors]
[plugins.cri.registry.mirrors."docker.io"]
endpoint = ["https://registry-1.docker.io"]
{{ range .InsecureRegistry -}}
[plugins.cri.registry.mirrors."{{. -}}"]
endpoint = ["http://{{. -}}"]
{{ end -}}
[plugins.diff-service]
default = ["walking"]
[plugins.linux]
......@@ -122,6 +126,7 @@ type Containerd struct {
ImageRepository string
KubernetesVersion semver.Version
Init sysinit.Manager
InsecureRegistry []string
}
// Name is a human readable name for containerd
......@@ -172,7 +177,7 @@ func (r *Containerd) Available() error {
}
// generateContainerdConfig sets up /etc/containerd/config.toml
func generateContainerdConfig(cr CommandRunner, imageRepository string, kv semver.Version, forceSystemd bool) error {
func generateContainerdConfig(cr CommandRunner, imageRepository string, kv semver.Version, forceSystemd bool, insecureRegistry []string) error {
cPath := containerdConfigFile
t, err := template.New("containerd.config.toml").Parse(containerdConfigTemplate)
if err != nil {
......@@ -182,9 +187,11 @@ func generateContainerdConfig(cr CommandRunner, imageRepository string, kv semve
opts := struct {
PodInfraContainerImage string
SystemdCgroup bool
InsecureRegistry []string
}{
PodInfraContainerImage: pauseImage,
SystemdCgroup: forceSystemd,
InsecureRegistry: insecureRegistry,
}
var b bytes.Buffer
if err := t.Execute(&b, opts); err != nil {
......@@ -207,7 +214,7 @@ func (r *Containerd) Enable(disOthers, forceSystemd bool) error {
if err := populateCRIConfig(r.Runner, r.SocketPath()); err != nil {
return err
}
if err := generateContainerdConfig(r.Runner, r.ImageRepository, r.KubernetesVersion, forceSystemd); err != nil {
if err := generateContainerdConfig(r.Runner, r.ImageRepository, r.KubernetesVersion, forceSystemd, r.InsecureRegistry); err != nil {
return err
}
if err := enableIPForwarding(r.Runner); err != nil {
......
......@@ -130,6 +130,8 @@ type Config struct {
ImageRepository string
// KubernetesVersion Kubernetes version
KubernetesVersion semver.Version
// InsecureRegistry list of insecure registries
InsecureRegistry []string
}
// ListOptions are the options to use for listing containers
......@@ -168,6 +170,7 @@ func New(c Config) (Manager, error) {
ImageRepository: c.ImageRepository,
KubernetesVersion: c.KubernetesVersion,
Init: sm,
InsecureRegistry: c.InsecureRegistry,
}, nil
default:
return nil, fmt.Errorf("unknown runtime type: %q", c.Type)
......
......@@ -244,6 +244,7 @@ func configureRuntimes(runner cruntime.CommandRunner, cc config.ClusterConfig, k
Runner: runner,
ImageRepository: cc.KubernetesConfig.ImageRepository,
KubernetesVersion: kv,
InsecureRegistry: cc.InsecureRegistry,
}
cr, err := cruntime.New(co)
if err != nil {
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册