如何将一个Azure AKS Kubernetes集群自签名CA添加到Gitlab CI/CD Kubernetes集成中?

我正在尝试将我的Azure AKS Kubernetes集群添加到我的Gitlab CI/CD Kubernetes集成中。

我可以执行 kubectl 运行此命令后,来自PC的群集上的命令:

az aks get-credentials --resource-group <resource-group-name> --name <kubernetes-cluster-name>

它创造了一个 .kube/config 包含如下内容的文件:

apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: <some long base64 string here>
    server: https://<resource-group-name+some-hexadecimal-chars>.hcp.westeurope.azmk8s.io:443
  name: <kubernetes-cluster-name>
contexts:
- context:
    cluster: <kubernetes-cluster-name>
    user: clusterUser_<resource-group-name>_<kubernetes-cluster-name>
  name: <kubernetes-cluster-name>
current-context: <kubernetes-cluster-name>
kind: Config
preferences: {}
users:
- name: clusterUser_<resource-group-name>_<kubernetes-cluster-name>
  user:
    client-certificate-data: <some long base64 string here>
    client-key-data: <some long base64 string here>
    token: <some secret string of hexadecimal chars here>

在Gitlab表单中,我必须输入以下字段:

1. Kubernetes集群名称
2. API URL
3. CA证书-证书颁发机构包(PEM格式)
4. 令牌
5. 项目命名空间(可选,唯一)

我尝试过这些价值观:

1. 我把我的 <kubernetes-cluster-name> 匹配Azure上群集的名称和
2. https://<resource-group-name+some-hexadecimal-chars>.hcp.westeurope.azmk8s.io:443
3. certificate-authority-data

Install

Something went wrong while installing Helm Tiller
Can't start installation process. nested asn1 error

Kubernetes error: SSL_connect returned=1 errno=0 state=error: certificate verify failed

az