1.5. 镜像以在受限环境中运行管道

流程

1. 为前端接口 pipelines-vote-ui 从 mirror registry 中镜像构建器镜像。

   1. 验证所需镜像标签没有导入：

      $ oc describe imagestream python -n openshift

      Copy to Clipboard Toggle word wrap

      输出示例

      Name:			python
      Namespace:		openshift
      [...]
      
      3.8-ubi9 (latest)
        tagged from registry.redhat.io/ubi9/python-38:latest
          prefer registry pullthrough when referencing this tag
      
        Build and run Python 3.8 applications on UBI 8. For more information about using this builder image, including OpenShift considerations, see https://github.com/sclorg/s2i-python-container/blob/master/3.8/README.md.
        Tags: builder, python
        Supports: python:3.8, python
        Example Repo: https://github.com/sclorg/django-ex.git
      
      [...]

      Copy to Clipboard Toggle word wrap

   2. 将支持的镜像标签镜像到私有 registry：

      $ oc image mirror registry.redhat.io/ubi9/python-39:latest <mirror-registry>:<port>/ubi9/python-39

      Copy to Clipboard Toggle word wrap

   3. 导入镜像：

      $ oc tag <mirror-registry>:<port>/ubi9/python-39 python:latest --scheduled -n openshift

      Copy to Clipboard Toggle word wrap

      您必须定期重新导入镜像。--scheduled 标志启用镜像自动重新导入。

   4. 验证带有指定标签的镜像已被导入：

      $ oc describe imagestream python -n openshift

      Copy to Clipboard Toggle word wrap

      输出示例

      Name:			python
      Namespace:		openshift
      [...]
      
      latest
        updates automatically from registry  <mirror-registry>:<port>/ubi9/python-39
      
        *  <mirror-registry>:<port>/ubi9/python-39@sha256:3ee...
      
      [...]

      Copy to Clipboard Toggle word wrap

2. 为后端接口 pipelines-vote-api 从 mirror registry 中镜像构建器镜像。

   1. 验证所需镜像标签没有导入：

      $ oc describe imagestream golang -n openshift

      Copy to Clipboard Toggle word wrap

      输出示例

      Name:			golang
      Namespace:		openshift
      [...]
      
      1.14.7-ubi8 (latest)
        tagged from registry.redhat.io/ubi8/go-toolset:1.14.7
          prefer registry pullthrough when referencing this tag
      
        Build and run Go applications on UBI 8. For more information about using this builder image, including OpenShift considerations, see https://github.com/sclorg/golang-container/blob/master/README.md.
        Tags: builder, golang, go
        Supports: golang
        Example Repo: https://github.com/sclorg/golang-ex.git
      
      [...]

      Copy to Clipboard Toggle word wrap

   2. 将支持的镜像标签镜像到私有 registry：

      $ oc image mirror registry.redhat.io/ubi9/go-toolset:latest <mirror-registry>:<port>/ubi9/go-toolset

      Copy to Clipboard Toggle word wrap

   3. 导入镜像：

      $ oc tag <mirror-registry>:<port>/ubi9/go-toolset golang:latest --scheduled -n openshift

      Copy to Clipboard Toggle word wrap

      您必须定期重新导入镜像。--scheduled 标志启用镜像自动重新导入。

   4. 验证带有指定标签的镜像已被导入：

      $ oc describe imagestream golang -n openshift

      Copy to Clipboard Toggle word wrap

      输出示例

      Name:			golang
      Namespace:		openshift
      [...]
      
      latest
        updates automatically from registry <mirror-registry>:<port>/ubi9/go-toolset
      
        * <mirror-registry>:<port>/ubi9/go-toolset@sha256:59a74d581df3a2bd63ab55f7ac106677694bf612a1fe9e7e3e1487f55c421b37
      
      [...]

      Copy to Clipboard Toggle word wrap

3. 从 cli 的镜像 registry 中镜像构建器镜像。

   1. 验证所需镜像标签没有导入：

      $ oc describe imagestream cli -n openshift

      Copy to Clipboard Toggle word wrap

      输出示例

      Name:                   cli
      Namespace:              openshift
      [...]
      
      latest
        updates automatically from registry quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:65c68e8c22487375c4c6ce6f18ed5485915f2bf612e41fef6d41cbfcdb143551
      
        * quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:65c68e8c22487375c4c6ce6f18ed5485915f2bf612e41fef6d41cbfcdb143551
      
      [...]

      Copy to Clipboard Toggle word wrap

   2. 将支持的镜像标签镜像到私有 registry：

      $ oc image mirror quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:65c68e8c22487375c4c6ce6f18ed5485915f2bf612e41fef6d41cbfcdb143551 <mirror-registry>:<port>/openshift-release-dev/ocp-v4.0-art-dev:latest

      Copy to Clipboard Toggle word wrap

   3. 导入镜像：

      $ oc tag <mirror-registry>:<port>/openshift-release-dev/ocp-v4.0-art-dev cli:latest --scheduled -n openshift

      Copy to Clipboard Toggle word wrap

      您必须定期重新导入镜像。--scheduled 标志启用镜像自动重新导入。

   4. 验证带有指定标签的镜像已被导入：

      $ oc describe imagestream cli -n openshift

      Copy to Clipboard Toggle word wrap

      输出示例

      Name:                   cli
      Namespace:              openshift
      [...]
      
      latest
        updates automatically from registry <mirror-registry>:<port>/openshift-release-dev/ocp-v4.0-art-dev
      
        * <mirror-registry>:<port>/openshift-release-dev/ocp-v4.0-art-dev@sha256:65c68e8c22487375c4c6ce6f18ed5485915f2bf612e41fef6d41cbfcdb143551
      
      [...]

      Copy to Clipboard Toggle word wrap