k8s dashboard:v2.0.5
阿新 • • 發佈:2021-11-29
k8s Dashboard Github 主頁:
Dashboard 資源清單:
https://github.com/kubernetes/dashboard/tree/v1.10.0/src/deploy/recommended
使用版本:
dashboard v2.0.5
Kubernetes v1.19.14
下載dashboard images:
kubectl delete ns kubernetes-dashboard wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.5/aio/deploy/recommended.yaml
修改資源配置檔案:
vim recommended.yaml ...... apiVersion: v1 kind: ServiceAccount metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard --- kind: Service apiVersion: v1 metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard spec: type: NodePort # 新增此行, 預設是Cluster,改成Nodeport ports: - port: 443 targetPort: 8443 nodePort: 30001 # 新增此行.固定埠號,如指定系統隨機分配. 注意大小寫 selector: k8s-app: kubernetes-dashboard ...... kubectl apply -f recommended.yaml
建立認證使用者和rbac.yaml:
vim dashboard-adminuser.yaml
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: admin-user
namespace: kubernetes-dashboard
kubectl apply -f dashboard-adminuser.yaml
建立一個叢集角色:
vim dashboard-ClusterRoleBinding.yaml --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: admin-user roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: admin-user namespace: kubernetes-dashboard kubectl apply -f dashboard-ClusterRoleBinding.yaml
獲取token:
kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk '{print $1}')
[root@k8s-master1 dashboard]# kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk '{print $1}')
Name: admin-user-token-mg8x4
Namespace: kubernetes-dashboard
Labels: <none>
Annotations: kubernetes.io/service-account.name: admin-user
kubernetes.io/service-account.uid: d2c574ae-a140-4f2c-b1fb-47c027484d8c
Type: kubernetes.io/service-account-token
Data
====
ca.crt: 1066 bytes
namespace: 20 bytes
token: eyJhbGciOiJSUzI1NiIsImtpZCI6InFaOHY4ZEVSQTNqYUxUZ0MtaW9nM0M4S0hqZ2VmUmw4QkxCZzVjaktxSTQifQ.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.je4pE1t1qG5GcwPJ-uRqadO_1PGNQqv4pxrEhtFtcekk17ffv3rCO-3Bllul--y5MHc3iM96L67bwYHbRZtak6iutLJYEbMht5EfB9hGGISc1xxw6IFR6XuQeIA_no6VeY3BTeyCbvoqBwQnh1ohzKoMYwUX6EbjymSVTZQaz0iFacVO0mCYN5DtHpYVLRk8vPdevStnzKvRrMFzlGWUajX0wCP0zxDBc5KLYox1_ls1-WsF9-zp7_wPlPww6mvofdzAuSBRwVr-8OmkbddPM5oaHMhiMT27E9hr5tK2xEhTSjhHoaJbtfmP_L5DV7gydu3lHEs0ftsCWW9K6wduqQ
訪問dashboard web 介面:
http://IP:30001
*** chrome 如果不能訪問http的URL,可以改用火狐瀏覽器.