部署Dashboard

「爱情、让人受尽委屈。」 2022-10-07 08:57 142阅读 0赞

Dashboard是kubernetes集群的web ui，使用它可以查看集群监控信息以及发布资源。

# 1 下配置文件并启动 #

wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.1/aio/deploy/recommended.yaml
    
    # 下载后修改配置 新增type: NodePort 和 nodePort：31443，以便能实现非本机访问：
    kind: Service
    apiVersion: v1
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard
      namespace: kubernetes-dashboard
    spec:
      type: NodePort
      ports:
        - port: 443
          targetPort: 8443
          nodePort: 31443
      selector:
        k8s-app: kubernetes-dashboard

# 启动dashboard
    kubectl apply -f recommended.yaml

# 2 创建用户 #

vim dashboard-adminuser.yaml
    
    apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: admin-user
      namespace: kubernetes-dashboard

# 启动
    kubectl apply -f dashboard-adminuser.yaml

# 3 创建集群角色 #

vim dashboard-ClusterRoleBinding.yaml
    
    apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    metadata:
      name: admin-user
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: ClusterRole
      name: cluster-admin
    subjects:
    - kind: ServiceAccount
      name: admin-user
      namespace: kubernetes-dashboard

# 启动
    kubectl apply -f dashboard-ClusterRoleBinding.yaml

# 4 获取token #

kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk '{print $1}')

# 5 访问集群 #

直接访问 会被浏览器报不安全的访问 需要在浏览器快捷方式配置 --test-type --ignore-certificate-errors

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpYW5nd2VubWFpbA_size_16_color_FFFFFF_t_70][]

[https://yourk8sapiserver:31443][https_yourk8sapiserver_31443]

![4a50afaf70a7d88ebddbcef7e05ca3b6.png][]

输入刚才获取的token 即可认证通过

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpYW5nd2VubWFpbA_size_16_color_FFFFFF_t_70]: /images/20221005/0530de1bcb694f3e91d5166d85da7cbc.png
[https_yourk8sapiserver_31443]: https://yourk8sapiserver:31443/
[4a50afaf70a7d88ebddbcef7e05ca3b6.png]: /images/20221005/982aa7bfab464e81b02a7a8be6514068.png