Gitlab & EKS #
创建IAM User&Group #
User：gitlab-ci，保存生成的Access key ID和Secret Access Key，后面会用到
Group：Gitlab.CI，添加Policy如下：
| Policy Name |
|---|
AmazonEKSWorkerNodePolicy |
|
AmazonEC2ContainerRegistryFullAccess |
|
AmazonEC2ContainerRegistryReadOnly |
|
AmazonEC2ContainerServiceFullAccess |
|
AmazonEKS_CNI_Policy |
将user gitlab-ci添加到Group Gitlab.CI
将IAM User添加到ConfigMap #
kubectl edit cm aws-auth -n kube-system
在mapUsers键追加：
- "groups":
- "system:masters"
"userarn": "arn:aws:iam::xxxxxxx:user/gitlab-ci"
"username": "gitlab-ci"
Gitlab仓库设置 #
Setting => CI/CD => Variables，添加变量：
- AWS_ACCESS_KEY_ID：<gitlab-ci用户的Access key ID>
- AWS_SECRET_ACCESS_KEY：<gitlab-ci用户的Secret Access Key>
Gitlab仓库.gitlab-ci.yml #