使用Kubespray离线部署kubernetes

#!/bin/bash

# 定义代理映射
declare -A proxies=(
    ["docker.io"]="docker-proxy.plz.ac"
    ["ghcr.io"]="ghcr.plz.ac"
    ["registry.k8s.io"]="k8s-io.plz.ac"
    ["quay.io"]="quay.plz.ac"
)

# 读取镜像列表文件
input_file="$1"
harbor_registry="harbor.infra.plz.ac/k8s"

# 读取镜像列表文件
while IFS= read -r image; do
    # 提取镜像仓库和名称
    registry=$(echo $image | cut -d '/' -f 1)
    name=$(echo $image | cut -d '/' -f 2-)

    # 选择对应的代理
    proxy=${proxies[$registry]}
    if [ -z "$proxy" ]; then
        echo "No proxy found for $registry"
        continue
    fi

    # 构建代理镜像URL
    proxy_image="$proxy/$name"

    # 拉取镜像
    echo "Pulling image: $proxy_image"
    docker pull $proxy_image

    # 重新tag镜像
    echo "Tagging image: $proxy_image as $image"
    docker tag $proxy_image $image

    # 构建目标镜像URL（去掉域名前缀，如果没有仓库，使用library）
    if [[ $name == *"/"* ]]; then
        target_image="$harbor_registry/$name"
    else
        target_image="$harbor_registry/library/$name"
    fi

    # 使用skopeo拷贝镜像到Harbor
    echo "Copying image: $image to $target_image"
    skopeo --insecure-policy copy docker-daemon:$image docker://$target_image

    # 删除中间镜像以节省空间
    docker rmi $proxy_image
    docker rmi $image

done < "$input_file"

---
registry_host: "harbor.infra.plz.ac/k8s"
files_repo: "https://mirrors.infra.plz.ac/k8s"
kube_image_repo: "{{ registry_host }}"
gcr_image_repo: "{{ registry_host }}"
github_image_repo: "{{ registry_host }}"
docker_image_repo: "{{ registry_host }}"
quay_image_repo: "{{ registry_host }}"
kubeadm_download_url: "{{ files_repo }}/dl.k8s.io/release/v{{ kube_version }}/bin/linux/{{ image_arch }}/kubeadm"
kubectl_download_url: "{{ files_repo }}/dl.k8s.io/release/v{{ kube_version }}/bin/linux/{{ image_arch }}/kubectl"
kubelet_download_url: "{{ files_repo }}/dl.k8s.io/release/v{{ kube_version }}/bin/linux/{{ image_arch }}/kubelet"
cni_download_url: "{{ files_repo }}/github.com/containernetworking/plugins/releases/download/v{{ cni_version }}/cni-plugins-linux-{{ image_arch }}-v{{ cni_version }}.tgz"
crictl_download_url: "{{ files_repo }}/github.com/kubernetes-sigs/cri-tools/releases/download/v{{ crictl_version }}/crictl-v{{ crictl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz"
etcd_download_url: "{{ files_repo }}/github.com/etcd-io/etcd/releases/download/v{{ etcd_version }}/etcd-v{{ etcd_version }}-linux-{{ image_arch }}.tar.gz"
calicoctl_download_url: "{{ files_repo }}/github.com/projectcalico/calico/releases/download/v{{ calico_ctl_version }}/calicoctl-linux-{{ image_arch }}"
calico_crds_download_url: "{{ files_repo }}/github.com/projectcalico/calico/archive/v{{ calico_version }}.tar.gz"
ciliumcli_download_url: "{{ files_repo }}/github.com/cilium/cilium-cli/releases/download/v{{ cilium_cli_version }}/cilium-linux-{{ image_arch }}.tar.gz"
helm_download_url: "{{ files_repo }}/get.helm.sh/helm-v{{ helm_version }}-linux-{{ image_arch }}.tar.gz"
crun_download_url: "{{ files_repo }}/github.com/containers/crun/releases/download/{{ crun_version }}/crun-{{ crun_version }}-linux-{{ image_arch }}"
kata_containers_download_url: "{{ files_repo }}/github.com/kata-containers/kata-containers/releases/download/{{ kata_containers_version }}/kata-static-{{ kata_containers_version }}-{{ image_arch }}.tar.xz"
cri_dockerd_download_url: "{{ files_repo }}/github.com/Mirantis/cri-dockerd/releases/download/v{{ cri_dockerd_version }}/cri-dockerd-{{ cri_dockerd_version }}.{{ image_arch }}.tgz"
runc_download_url: "{{ files_repo }}/github.com/opencontainers/runc/releases/download/v{{ runc_version }}/runc.{{ image_arch }}"
crio_download_base: "download.opensuse.org/repositories/devel:kubic:libcontainers:stable"
crio_download_crio: "http://{{ crio_download_base }}:/cri-o:/"
crio_download_url: "{{ files_repo }}/storage.googleapis.com/cri-o/artifacts/cri-o.{{ image_arch }}.v{{ crio_version }}.tar.gz"
skopeo_download_url: "{{ files_repo }}/github.com/lework/skopeo-binary/releases/download/v{{ skopeo_version }}/skopeo-linux-{{ image_arch }}"
containerd_download_url: "{{ files_repo }}/github.com/containerd/containerd/releases/download/v{{ containerd_version }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
nerdctl_download_url: "{{ files_repo }}/github.com/containerd/nerdctl/releases/download/v{{ nerdctl_version }}/nerdctl-{{ nerdctl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz"
gvisor_runsc_download_url: "{{ files_repo }}/storage.googleapis.com/gvisor/releases/release/{{ gvisor_version }}/{{ ansible_architecture }}/runsc"
gvisor_containerd_shim_runsc_download_url: "{{ files_repo }}/storage.googleapis.com/gvisor/releases/release/{{ gvisor_version }}/{{ ansible_architecture }}/containerd-shim-runsc-v1"

[all:vars]
# 定义全局变量，适用于所有主机
ansible_user=user
# 假设 local_release_dir 是部署在远程用户家目录下的 releases 目录
# {{ ansible_user }} 会被替换为上面定义的 'user'
local_release_dir=/home/{{ ansible_user }}/releases
# 如果使用 SSH 密钥进行连接，并需要指定私钥文件，可以取消注释并修改以下行：
# ansible_ssh_private_key_file=/home/user/.ssh/id_rsa_k8s  # 替换为实际私钥路径

[kube_control_plane]
# Kubernetes 控制平面节点 (Masters)
# 格式: <主机别名> ansible_host=<IP地址> [其他主机变量]
infra-master-1 ansible_host=10.31.0.110
infra-master-2 ansible_host=10.31.0.111
infra-master-3 ansible_host=10.31.0.112

[etcd]
# etcd 集群节点 (通常与控制平面节点相同)
infra-master-1 ansible_host=10.31.0.110
infra-master-2 ansible_host=10.31.0.111
infra-master-3 ansible_host=10.31.0.112

[kube_node]
# 工作节点
infra-worker-1 ansible_host=10.31.0.113
infra-worker-2 ansible_host=10.31.0.114
infra-worker-3 ansible_host=10.31.0.115
infra-worker-4 ansible_host=10.31.0.116
infra-worker-5 ansible_host=10.31.0.117

---
dashboard_enabled: true
helm_enabled: false
registry_enabled: false
metrics_server_enabled: true
local_path_provisioner_enabled: false
local_volume_provisioner_enabled: false
ingress_nginx_enabled: true
ingress_publish_status_address: ""
ingress_alb_enabled: false
cert_manager_enabled: true
cert_manager_namespace: "cert-manager"
metallb_enabled: false
metallb_speaker_enabled: "{{ metallb_enabled }}"
metallb_namespace: "metallb-system"
argocd_enabled: false
kube_vip_enabled: false
node_feature_discovery_enabled: false