k8s笔记4-Web UI dashboard设置

待我称王封你为后i 2022-03-22 04:27 147阅读 0赞

## Web UI设置 ##

cd k8s/soft/kubernetes/
    tar zxf kubernetes-src.tar.gz
    cd cluster/addons/
    cd dashboard/
    kubectl create -f dashboard-configmap.yaml
    kubectl create -f dashboard-rbac.yaml
    kubectl create -f dashboard-secret.yaml
    vi dashboard-controller.yaml
    
    *****************
    ------------------------
          containers:
          - name: kubernetes-dashboard
            image: k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.0
    ---------------------------
    修改为
    ---------------------------
          containers:
          - name: kubernetes-dashboard
            image: registry.cn-hangzhou.aliyuncs.com/kuberneters/kubernetes-dashboard-amd64:v1.10.1
    -----------------------
    **********************
    kubectl create -f dashboard-controller.yaml

直接在 [dev.aliyun.com][] 中搜索kubernetes-dashboard-amd64，  
找到最新版，复制并更改在dashboard-controller.yaml中。

kubectl get pods
    kubectl get pods -n kube-system
    kubectl logs kubernetes-dashboard-6d9698df7b-wvmcf -n kube-system

![在这里插入图片描述][2019012315084116.png]

vi dashboard-service.yaml

--------------------

## 添加NodePort类型：   type: NodePort   ![在这里插入图片描述][20190124093111820.png] ##

kubectl create -f dashboard-service.yaml
    kubectl get pods -n kube-system

有错误的话可查看日志

kubectl logs kubernetes-dashboard-5f5bfdc89f-jt7k6 -n kube-system

结果如果有HTTPS port: 8443，则说明外部连接https成功。  
![在这里插入图片描述][2019012409433061.png]

kubectl get svc -n kube-system

Note：重新生成dashboard，需要先删除再运行

kubectl delete -f dashboard-controller.yaml
    kubectl delete -f dashboard-service.yaml
    kubectl create -f dashboard-controller.yaml
    kubectl create -f dashboard-service.yaml

![在这里插入图片描述][2019012409210122.png]  
[https://Node01:39623/][https_Node01_39623]

vi k8s-admin.yaml

apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: dashboard-admin
      namespace: kube-system
    ---
    kind: ClusterRoleBinding
    apiVersion: rbac.authorization.k8s.io/v1beta1
    metadata:
      name: dashboard-admin
    subjects:
      - kind: ServiceAccount
        name: dashboard-admin
        namespace: kube-system
    roleRef:
      kind: ClusterRole
      name: cluster-admin
      apiGroup: rbac.authorization.k8s.io

生成token

kubectl get secret -n kube-system

![在这里插入图片描述][20190123214524961.png]  
token使用即可

kubectl describe secret dashboard-admin-token-cmk9j -n kube-system

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTA4MDE5OTQ_size_16_color_FFFFFF_t_70]  
在firefox浏览器中输入任一Node:：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTA4MDE5OTQ_size_16_color_FFFFFF_t_70 1]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTA4MDE5OTQ_size_16_color_FFFFFF_t_70 2]  
当出现很多不能访问的waring时，建立如下文件

apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: aks-dashboard-admin
      namespace: kube-system
    ---
    apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    metadata:
      name: aks-dashboard-admin
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: ClusterRole
      name: cluster-admin
    subjects:
    - kind: ServiceAccount
      name: aks-dashboard-admin
      namespace: kube-system

重新生成secret，如下面第一条  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTA4MDE5OTQ_size_16_color_FFFFFF_t_70 3]

[dev.aliyun.com]: http://dev.aliyun.com
[2019012315084116.png]: /images/20220322/61e6ca39ce0b4f128d8db6b4beb95b8e.png
[20190124093111820.png]: /images/20220322/0a49d58a27884b85bb0e920b52ac1986.png
[2019012409433061.png]: /images/20220322/541e09d0789f44d696c4c1381564e008.png
[2019012409210122.png]: /images/20220322/fdd79f8908eb4ff99d45cfe265384899.png
[https_Node01_39623]: https://Node01:39623/
[20190123214524961.png]: /images/20220322/4674a44129204aefb51500ca00fb36f1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTA4MDE5OTQ_size_16_color_FFFFFF_t_70]: /images/20220322/04ead7b9aa684da59ab17e4ed8fe02d1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTA4MDE5OTQ_size_16_color_FFFFFF_t_70 1]: /images/20220322/ae3f74d11e04415b964616654a5028d7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTA4MDE5OTQ_size_16_color_FFFFFF_t_70 2]: /images/20220322/5b1a1c2367db4ba491297eaa8ac403ce.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTA4MDE5OTQ_size_16_color_FFFFFF_t_70 3]: /images/20220322/4ea7c619d273423898010172477b2b21.png