为 Jenkins 启动 kubernetes pod 的证书问题托管在该 kubernetes 集群之外

如何解决为 Jenkins 启动 kubernetes pod 的证书问题托管在该 kubernetes 集群之外

我一直在尝试在我现有的 jenkins 设置（托管在 k8s 集群之外）上配置 jenkins kubernetes 云代理。我的 jenkins 托管在 Windows VM 中的 Google Cloud Platform 中。它暴露在互联网上，我们添加了 ssl 认证。

我们正在尝试使用 Jenkins Kubernetes 插件添加云代理。到 kubernetes 的连接有效（我已经通过测试连接验证了这一点。当我的工作尝试开始时，pods 容器也被添加到集群中）。我在 pod 模板中添加以下配置 - pod 容器在我的 kubernetes 引擎中启动。

问题 - 作业未运行并不断创建新 Pod 并删除旧 Pod。在正确的方向上需要一些帮助。我在网上搜索是否有人有类似的问题或设置。似乎每个人都在 k8s 中托管 jenkins 和云代理。

我认为问题在于我们的 jenkins 在我们的 kubernetes 集群之外。

我现在使用默认基本映像只是为了查看和检查作业是否运行。 Job 在 Build shell 步骤中只有一个 echo 命令。我试过的图片

jnlp-slave-with-java-build-tools
詹金斯/入站代理
詹金斯/代理

对我的 kubernetes 集群的身份验证使用的是所有访问权限的服务帐户 json。我正在使用 Freestyle 作业

谷歌堆栈驱动程序日志中的错误 -

SEVERE: Failed to connect to https://bflow.br.iq/tcpslaveAgentListener/: PKIX path building Failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target`

`java.io.IOException: Failed to connect to https://bflow.br.iq/tcpslaveAgentListener/: PKIX path building Failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at org.jenkinsci.remoting.engine.JnlpAgentEndpointResolver.resolve(JnlpAgentEndpointResolver.java:214)
    at hudson.remoting.Engine.innerRun(Engine.java:689)
    at hudson.remoting.Engine.run(Engine.java:514)
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building Failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.ssl.Alert.createSSLException(Alert.java:131)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:324)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:267)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:262)
    at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)
    at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
    at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
    at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377)
    at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)
    at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)
    at sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)
    at sun.security.ssl.SSLTransport.decode(SSLTransport.java:149)
    at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1143)
    at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1054)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:394)
    at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
    at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
    at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:167)
    at org.jenkinsci.remoting.engine.JnlpAgentEndpointResolver.resolve(JnlpAgentEndpointResolver.java:211)
    ... 2 more
Caused by: sun.security.validator.ValidatorException: PKIX path building Failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.validator.PKIXValidator.dobuild(PKIXValidator.java:456)
    at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:323)
    at sun.security.validator.Validator.validate(Validator.java:271)
    at sun.security.ssl.x509trustmanagerImpl.validate(x509trustmanagerImpl.java:315)
    at sun.security.ssl.x509trustmanagerImpl.checkTrusted(x509trustmanagerImpl.java:223)
    at sun.security.ssl.x509trustmanagerImpl.checkServerTrusted(x509trustmanagerImpl.java:129)
    at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)
    ... 16 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
    at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
    at sun.security.validator.PKIXValidator.dobuild(PKIXValidator.java:451)
    ... 22 more