第 3 章 在受限环境中的 Openshift 上安装 Fuse

要在非限制的环境中的 OpenShift 上安装 Fuse,您可以从 registry.redhat.io 中拉取镜像流和模板。在没有或有限的互联网访问的生产环境中,无法实现。本节介绍如何在受限环境中的 OpenShift 上安装 Fuse。

注意

IBM Power Systems、IBM Z 和 LinuxONE 目前不支持在受限环境中安装。

先决条件

  • 您已安装并配置了 OpenShift 服务器,以便它可以在受限环境中运行。

3.1. 设置内部 Docker registry

本节介绍如何设置可用于推送或拉取镜像的内部 docker registry。您必须配置可拉取或推送镜像的内部 docker registry。

流程

  1. 安装内部 ROOT CA。

    cd /etc/pki/ca-trust/source/anchors
    sudo curl -O https://password.corp.redhat.com/RH-IT-Root-CA.crt
    sudo update-ca-trust extract
    sudo update-ca-trust update

    此证书允许系统向 registry 验证其自身。

  2. 登录 registry.redhat.io

    docker login -u USERNAME -p PASSWORD registry.redhat.io
  3. registry.redhat.io 拉取 OpenShift 镜像上的 Fuse。

    docker pull registry.redhat.io/fuse7/fuse-java-openshift-rhel8:1.10
    docker pull registry.redhat.io/fuse7/fuse-java-openshift-jdk11-rhel8:1.10
    docker pull registry.redhat.io/fuse7/fuse-karaf-openshift-rhel8:1.10
    docker pull registry.redhat.io/fuse7/fuse-console-rhel8:1.10
    docker pull registry.redhat.io/fuse7/fuse-apicurito-rhel8:1.10
    docker pull registry.redhat.io/fuse7/fuse-apicurito-generator-rhel8:1.10
  4. 标记拉取的镜像流。

    docker tag registry.redhat.io/fuse7/fuse-java-openshift-rhel8:1.10 docker-registry.upshift.redhat.com/fuse7/fuse-java-openshift-rhel8:1.10
    docker tag registry.redhat.io/fuse7/fuse-java-openshift-jdk11-rhel8:1.10 docker-registry.upshift.redhat.com/fuse7/fuse-java-openshift-jdk11-rhel8:1.10
    docker tag registry.redhat.io/fuse7/fuse-karaf-openshift-rhel8:1.10 docker-registry.upshift.redhat.com/fuse-karaf-openshift-rhel8:1.10
    docker tag registry.redhat.io/fuse7/fuse-console-rhel8:1.10 docker-registry.upshift.redhat.com/fuse7-fuse-console-rhel8:1.10
    docker tag registry.redhat.io/fuse7/fuse-apicurito-rhel8:1.10 docker-registry.upshift.redhat.com/fuse7-fuse-apicurito-rhel8:1.10
    docker tag registry.redhat.io/fuse7/fuse-apicurito-generator-rhel8:1.10 docker-registry.upshift.redhat.com/fuse7-fuse-apicurito-generator-rhel8:1.10
  5. 将标记的镜像流推送到内部 docker registry。

    docker push docker-registry.upshift.redhat.com/fuse7/fuse-java-openshift-rhel8:1.10
    docker push docker-registry.upshift.redhat.com/fuse7/fuse-java-openshift-jdk11-rhel8:1.10
    docker push docker-registry.upshift.redhat.com/fuse-karaf-openshift-rhel8:1.10
    docker push docker-registry.upshift.redhat.com/fuse7-fuse-console-rhel8:1.10
    docker push docker-registry.upshift.redhat.com/fuse7-fuse-apicurito-rhel8:1.10
    docker push docker-registry.upshift.redhat.com/fuse7-fuse-apicurito-generator-rhel8:1.10