第 3 章 在受限环境中的 Openshift 上安装 Fuse

要在非限制的环境中的 OpenShift 上安装 Fuse，您可以从 registry.redhat.io 中拉取镜像流和模板。在没有或有限的互联网访问的生产环境中，无法实现。本节介绍如何在受限环境中的 OpenShift 上安装 Fuse。

先决条件

  • 您已安装并配置了 OpenShift 服务器，以便它可以在受限环境中运行。

3.1. 设置内部 Docker registry

本节介绍如何设置可用于推送或拉取镜像的内部 docker registry。您必须配置可拉取或推送镜像的内部 docker registry。

流程

  1. 安装内部 ROOT CA。 

    cd /etc/pki/ca-trust/source/anchors
sudo curl -O https://password.corp.redhat.com/RH-IT-Root-CA.crt
sudo update-ca-trust extract
sudo update-ca-trust update

    此证书允许系统向 registry 验证其自身。

  2. 登录 registry.redhat.io。 

    docker login -u USERNAME -p PASSWORD registry.redhat.io

  3. 从 registry.redhat.io 拉取 OpenShift 镜像上的 Fuse。 

    docker pull registry.redhat.io/fuse7/fuse-java-openshift-rhel8:1.9
docker pull registry.redhat.io/fuse7/fuse-java-openshift-jdk11-rhel8:1.9
docker pull registry.redhat.io/fuse7/fuse-karaf-openshift-rhel8:1.9
docker pull registry.redhat.io/fuse7/fuse-console-rhel8:1.9
docker pull registry.redhat.io/fuse7/fuse-apicurito-rhel8:1.9
docker pull registry.redhat.io/fuse7/fuse-apicurito-generator-rhel8:1.9

  4. 标记拉取的镜像流。 

    docker tag registry.redhat.io/fuse7/fuse-java-openshift-rhel8:1.9 docker-registry.upshift.redhat.com/fuse7/fuse-java-openshift-rhel8:1.9
docker tag registry.redhat.io/fuse7/fuse-java-openshift-jdk11-rhel8:1.9 docker-registry.upshift.redhat.com/fuse7/fuse-java-openshift-jdk11-rhel8:1.9
docker tag registry.redhat.io/fuse7/fuse-karaf-openshift-rhel8:1.9 docker-registry.upshift.redhat.com/fuse-karaf-openshift-rhel8:1.9
docker tag registry.redhat.io/fuse7/fuse-console-rhel8:1.9 docker-registry.upshift.redhat.com/fuse7-fuse-console-rhel8:1.9
docker tag registry.redhat.io/fuse7/fuse-apicurito-rhel8:1.9 docker-registry.upshift.redhat.com/fuse7-fuse-apicurito-rhel8:1.9
docker tag registry.redhat.io/fuse7/fuse-apicurito-generator-rhel8:1.9 docker-registry.upshift.redhat.com/fuse7-fuse-apicurito-generator-rhel8:1.9

  5. 将标记的镜像流推送到内部 docker registry。 

    docker push docker-registry.upshift.redhat.com/fuse7/fuse-java-openshift-rhel8:1.9
docker push docker-registry.upshift.redhat.com/fuse7/fuse-java-openshift-jdk11-rhel8:1.9
docker push docker-registry.upshift.redhat.com/fuse-karaf-openshift-rhel8:1.9
docker push docker-registry.upshift.redhat.com/fuse7-fuse-console-rhel8:1.9
docker push docker-registry.upshift.redhat.com/fuse7-fuse-apicurito-rhel8:1.9
docker push docker-registry.upshift.redhat.com/fuse7-fuse-apicurito-generator-rhel8:1.9