k8s vpn 路由设置

#Prerequisites

The chectl management tool is available

Run the following command in the terminal

bash <(curl -sL  https://www.eclipse.org/che/chectl/)
    
Run the following command to verify that the chectl tool is available

which chectl
    chectl --version

Install kubectl binary with curl on Linux

curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
    
    wget https://dl.k8s.io/release/v1.21.0/bin/linux/amd64/kubectl

Install kubectl

sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl

Run the following command

chectl server:deploy --platform microk8s -m
    
Run without tls

```
#vi patch.yaml
spec:
  server:
    tlsSupport: true
    cheHost: eclipse.che.xxx.xxx
    customCheProperties:
      CHE_LIMITS_USER_WORKSPACES_RUN_COUNT: "1"
      CHE_LIMITS_USER_WORKSPACES_COUNT: "50"
  storage:
    pvcStrategy: 'common'
    postgresPVCStorageClassName: 'rbd-temp'
    workspacePVCStorageClassName: 'rbd-temp'
```

```
#vi tls.yaml
apiVersion: v1
data:
  tls.crt: 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
  tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb3dJQkFBS0NBUUVBdDZlZkhjalg3QURlSmtCQWVOZ2dMY0I0a1NlTU9mektBZXdqL3VYKzVLc3V3ZlNQCm0zbm8xMFRHVzZOOEp3K1IzK0hMdzF3UjRuam5Jc2JZRDI0YXpEZENsVHBqV3JyM1p5SmppR2tqbGxld2tXdlUKbzZRc2ZuOGJvbjRDbE81QnRJUGFYdlREUjFQRi9FLzJSNEtSUndXVTF0c0U3ZWdNenBOWHhvUENOSDVoa0JpRQpwRTQyM1BLVm5HOVh5V1lVOHJocGdPUjQxZ1N1NTFwUHNuOFZ6NElVVVdMNDRRdzZBa09sY0ZGQ3RaYWd2TFNMCkF2S2g5anhYRlplQkxIYjh2L3pqbXg2L0U1T2R5Tzg5ZDhxUE1SZmNrV2w1VWJ5VnpvUEQwalFsaHhydVVKQisKZWV6M29WbGNBaDlUNDM5cURZamkvT3BqdEw5RzdNbXJVS0RuZ3dJREFRQUJBb0lCQUF4RXZGSm5DbFdQc1VkbwozMld6T21NVUNublg1SHd6TU9Oei9PdVlQYkRVNXFpNlI2V2hQVGEwTjNRRHRkVitLc2FEOVBLMkFkUFpNOGVVCjlQWUM2dk5kZGFzMlhWREFVS3FwRjNFVFpQYzBJRzEyZ0p2MTZhc0Jucno2SWY0RTlJcTBqQy92dGVQYjZzdnkKSTRlZlowa1JUR0lWKzN4UkZobnVxZHh2RE5nb3hDbVJ2MUlxUUwxclFKRDBSSmFEK0FUSmxsWVNNeG14emxCTApuc2lXelMyN1cwU05pY2xRdXpqUVhCNTVtTEJ1WU55U1cyMGdyL3RjUWY2UjRzdWFSMWx0UnpzbFk3RFE1dEowCjh1R2JTZW1jdFRtUmJUV1hsM3B5UVpKMUlwakt6NzNZOTJwdEFCTS9kYlBPS1ZHa0tjMEpKK0ZtblUxVlR5eTIKOHVhVUs1RUNnWUVBNFoxNzdhQi9wZm8xMnlROHA2eVBlemNJY1ZqU3ovOWJrNUVEUTV0NHkvaTNESVNibUlPRwpobE5sWUV5OVhmTy9WVk92OEZQRmdnRWg3L0ZFak5iVm8xOTNHOEZwNmxaZGJFS09NWkUzd1FLbytUVjBhT0JPClR2VVdVRzBpbkdLTE54SzNySzBEaWZvczhmQ1Y4WE9IRGNkV09LLzc5bHpEUFhQaWptRGJQaTBDZ1lFQTBHTjQKM2x2RzZWRmU3OGt4eDNUZUs4SG9uNldGOUdTektmTXI4bmRNSHNWV0kvMWgyR3ZnYkNNanJzKytDenRKdGlEbwpFYWFoNURHckd4TzVjRFoxamdWaUVxd3RXeG5NMkJqUDFkYUtwYW9nMWFqOCtLU2JlU0tKS3B4MTdzWnoyZEhjCnVNOGNDYVhNSERsT25GYWZaVFdKQ1ZqVXhqbytieGxaUnZMZCttOENnWUVBejA3QXYvRlpPVzYycTkwWktzemgKcmtzOEk4S0ZPd0FkNm5NMTk1cFZIYjgwbTNrQjY5cjI4bGlRN3pLMFVpOFZvVmJiZEUzVlR3YXhZMk5qSkxLRwo3YTVicUpKSk96ME9iTnFmQTZhMi8wL3RhY2dYWmdLdGtkbWNIbHlaais3d2tyTk5PSXBsbFJQZTFwVEZnbTR3Cks1WDlnT3NiN3h6L2ZXa05STngwdUNVQ2dZQWFMYlRjY2prZHpHd1p3WE93YzkwSk1EWHlBRkJBc0huVmRrZjYKRU1TT1JRb2FRVldPWTVidzNzVTN5Nzg3Ri9xZGw2cXZ0UGczZTRuY1AvRVd5TENoNDhrN1FVZjlYdE5kL2xmMQpyQnNFenNlTEw4eC95K1lBSkxlSWs5azQ0dE5nOUwwK3RqMzJkRTZjNlJJWUQ4VzhhQ3BMODAzZmpTZVV1MkY4CnlUdmJud0tCZ0dxWWMwaWw0UndHeldnUURjQmtzZnI3azE3eEpuQTJMVG5HV295ZTJlWEVTbTNqaG04RWpEckEKQ2hMKzRrdGU4MExaQ0F5VUluRUFCeHdoQUEvdHVHMlZYR0ZMWXRXamcrU1VBNHhIVTNFcEtLY0J2SDgyK2NmYwpwMnUyR2JDbHY0Zm1mSlloVUpVUDYxdXhDK1BsenRVQ1Q0Z3RGclMvUlJtWUl2Z2YvcUhzCi0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==
kind: Secret
metadata:
  name: che-tls
  namespace: eclipse-che
type: kubernetes.io/tls
```

kubectl apply -f tls.yaml

chectl server:deploy --platform=microk8s --multiuser --installer=operator --che-operator-cr-patch-yaml=patch.yaml --domain che.xxx.xxx
    
    kubectl edit CheCluster -n eclipse-che eclipse-che -o yaml
    
    
Users Dashboard           : https://eclipse.che.xxx.xxx
Identity Provider URL     : https://keycloak-eclipse-che.che.xxx.xxx/auth/
Plug-in Registry          : https://plugin-registry-eclipse-che.che.xxx.xxx/v3/
Devfile Registry          : https://devfile-registry-eclipse-che.che.xxx.xxx/

Navigation

Recent Posts

Friend Links