Openshift创建Router和Registry:

[root@DockerServer openshift]# oadm policy add-scc-to-user privileged system:serviceacount:default:router

scc "privileged" added to: ["system:serviceacount:default:router"]

[root@DockerServer openshift]# oadm policy add-scc-to-user hostnetwork system:serviceaccount:default:router

scc "hostnetwork" added to: ["system:serviceaccount:default:router"]

[root@DockerServer openshift]# oadm policy add-scc-to-user privileged system:serviceaccount:default:router

scc "privileged" added to: ["system:serviceaccount:default:router"]

[root@DockerServer openshift]# oadm router router --replicas=1 --service-account=router

info: password for stats user admin has been set to gEpwLc6BC4

--> Creating router router ...

serviceaccount "router" created

clusterrolebinding "router-router-role" created

deploymentconfig "router" created

service "router" created

--> Success

Same way:

[root@DockerServer openshift]# oadm policy add-scc-to-user privileged -z router

scc "privileged" added to: ["system:serviceaccount:default:router"]

[root@DockerServer openshift]# oc adm policy add-scc-to-user hostnetwork -z router

scc "hostnetwork" added to: ["system:serviceaccount:default:router"]

[root@DockerServer openshift]# oc get pod -n default

NAME             READY     STATUS    RESTARTS   AGE

router-1-bd6f2   1/1       Running   0          4m

[root@DockerServer openshift]# ss -ltn|egrep -w "80|443"

LISTEN     0      128          *:80                       *:*

LISTEN     0      128          *:443                      *:*

[root@DockerServer openshift]# oadm registry --config=/opt/openshift/openshift.local.config/master/admin.kubeconfig --service-account=registry

--> Creating registry registry ...

serviceaccount "registry" created

clusterrolebinding "registry-registry-role" created

deploymentconfig "docker-registry" created

service "docker-registry" created

--> Success

[root@DockerServer openshift]# oc get pod

NAME                      READY     STATUS    RESTARTS   AGE

docker-registry-1-2kqtb   1/1       Running   0          1m

router-1-bd6f2            1/1       Running   0          29m

[root@DockerServer openshift]# vi /etc/sysconfig/docker

OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false --registry-mirror=https://docker.mirrors.ustc.edu.cn --insecure-registry=172.30.0.0/16'

[root@DockerServer openshift]# systemctl restart docker