在企业代理后面的 Kubernetes 上安装 Jenkins

Question

我正在尝试在公司代理后面的 RKE2 集群上安装 jenkins。

我将这些值添加到我的舵图中

controller: 
  initContainerEnv:
    - name: http_proxy
      value: http://xxx:[email protected]:8080
    - name: https_proxy
      value: http://xxx:[email protected]:8080
    - name: no_proxy
      value: >-
        jenkins-dev,jenkins-dev.jenkins.svc.cluster.local,localhost,kubernetes.default,kubernetes.default.svc,kubernetes.default.svc.cluster.local,xxx.com,xx.com
    - name: JENKINS_UC
      value: http://updates.jenkins.io
    - name: JENKINS_UC_EXPERIMENTAL
      value: http://updates.jenkins.io
    - name: JENKINS_INCREMENTALS_REPO_MIRROR
      value: http://repo.jenkins-ci.org/incrementals
    - name: JENKINS_PLUGIN_INFO
      value: http://updates.jenkins.io/plugin-versions.json
    - name: _JAVA_OPTIONS
      value: >-
        -Dhttp.proxyHost=10.205.xxx.xxx   -Dhttp.proxyPort=8080
        -Dhttp.proxyUser=xxx   -Dhttp.proxyPassword=xxx
        -Dhttps.proxyHost=10.205.xxx.xxx   -Dhttps.proxyPort=8080
        -Dhttps.proxyUser=xxx  -Dhttps.proxyPassword=xxx
        -Dhttp.nonProxyHosts="jenkins-dev|jenkins-dev.jenkins.svc.cluster.local|localhost|kubernetes.default|kubernetes.default.svc|kubernetes.default.svc.cluster.local|xxx.com|xx.com"

init 容器失败，当我尝试从 http://updates.jenkins.io:

下载插件时收到错误

Unable to resolve plugin URL http://updates.jenkins.io/download/plugins/skip-certificate-check/1.1/skip-certificate-check.hpi, or download plugin skip-certificate-check to file: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Tried downloading skip-certificate-check from https://get.jenkins.io/plugins/skip-certificate-check/1.1/skip-certificate-check.hpi (attempt 1 of 3)
Unable to resolve plugin URL http://updates.jenkins.io/download/plugins/git/5.1.0/git.hpi, or download plugin git to file: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Tried downloading git from https://get.jenkins.io/plugins/git/5.1.0/git.hpi (attempt 1 of 3)
Unable to resolve plugin URL http://updates.jenkins.io/download/plugins/workflow-multibranch/756.v891d88f2cd46/workflow-multibranch.hpi, or download plugin workflow-multibranch to file: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Tried downloading workflow-multibranch from https://get.jenkins.io/plugins/workflow-multibranch/756.v891d88f2cd46/workflow-multibranch.hpi (attempt 1 of 3)
Unable to resolve plugin URL http://updates.jenkins.io/download/plugins/jakarta-mail-api/2.0.1-3/jakarta-mail-api.hpi, or download plugin jakarta-mail-api to file: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Tried downloading jakarta-mail-api from https://get.jenkins.io/plugins/jakarta-mail-api/2.0.1-3/jakarta-mail-api.hpi (attempt 1 of 3)

奇怪的是我能够下载 update-center.json。

有人可以帮忙吗？

Answer 1

我必须绕过代理上的 ssl（然后使用 HTTPS 存储库）