1、在Master節(jié)點(diǎn)上執(zhí)行

cat /root/.kube/config

得到以下內(nèi)容：

apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5RENDQWJDZ0F3SUJBZ0lCQURBTkJna3Foa2l......省略......RkJLdlU4QnBpMTJicz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
    server: https://172.17.221.218:6443
  name: kubernetes
contexts:
- context:
    cluster: kubernetes
    user: kubernetes-admin
  name: kubernetes-admin@kubernetes
current-context: kubernetes-admin@kubernetes
kind: Config
preferences: {}
users:
- name: kubernetes-admin
  user:
    client-certificate-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM4akNDQWRxZ0F3SUJBZ0lJT2NDUk4zQ2phQlF......省略......kMHpyd1JmRTdVZz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
    client-key-data: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb2dJQkFBS0NBUUVBMjVBOWpYaVR3ZSt......省略......M9Ci0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==

制作jenkins登錄kubernetes的證書：

#將certificate-authority-data的內(nèi)容保存到kube-ca.crt
echo LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSA0RV......tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= | base64 -d > ~/kube-cert/kube-ca.crt

#將client-certificate-data的內(nèi)容保存到kube-client.crt
echo LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS......0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= | base64 -d > ~/kube-cert/kube-client.crt

#將client-key-data的內(nèi)容保存到kube-client.key
echo LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLR......QSBQUklWQVRFIEtFWS0tLS0tCg== | base64 -d > ~/kube-cert/kube-client.key

#創(chuàng)建證書kube-cert.pfx，kube-cert.pfx證書要上傳到j(luò)enkins，創(chuàng)建證書需要設(shè)置密碼，密碼在jenkins要用到！
openssl pkcs12 -export -out ~/kube-cert/kube-cert.pfx -inkey ~/kube-cert/kube-client.key -in ~/kube-cert/kube-client.crt -certfile ~/kube-cert/kube-ca.crt

2、按圖填寫對(duì)應(yīng)內(nèi)容。

image.png

3、添加憑據(jù)。

image.png

完成后點(diǎn)測(cè)試連接，應(yīng)該會(huì)出現(xiàn)連接成功

image.png