K8S部署 Dashboard UI

2021-01-31

字数统计: 745字 | 阅读时长≈ 4分

1.yaml安装部署Dashboard

1.以官方yaml部署Dashboard UI

[root@leoheng-k8s ~]# kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0/aio/deploy/recommended.yaml
namespace/kubernetes-dashboard created
serviceaccount/kubernetes-dashboard created
service/kubernetes-dashboard created
secret/kubernetes-dashboard-certs created
secret/kubernetes-dashboard-csrf created
secret/kubernetes-dashboard-key-holder created
configmap/kubernetes-dashboard-settings created
role.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrole.rbac.authorization.k8s.io/kubernetes-dashboard created
rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
deployment.apps/kubernetes-dashboard created
service/dashboard-metrics-scraper created
deployment.apps/dashboard-metrics-scraper created

2.查看dashboard运行状态，以deployment方式部署，运行2个pod及2个service：

[root@leoheng-k8s ~]# kubectl -n kubernetes-dashboard get pods
NAME                                         READY   STATUS    RESTARTS   AGE
dashboard-metrics-scraper-7b59f7d4df-5b8vq   1/1     Running   0          16m
kubernetes-dashboard-74d688b6bc-vj4qk        1/1     Running   0          16m
[root@leoheng-k8s ~]#  kubectl -n kubernetes-dashboard get svc
NAME                        TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
dashboard-metrics-scraper   ClusterIP   10.103.142.217   <none>        8000/TCP   17m
kubernetes-dashboard        ClusterIP   10.102.207.104   <none>        443/TCP    17m
[root@leoheng-k8s ~]#

2.执行公网暴露服务

1.指定Dashboard公网暴露的端口

[root@leoheng-k8s ~]# kubectl  patch svc kubernetes-dashboard -n kubernetes-dashboard \
> -p '{"spec":{"type":"NodePort","ports":[{"port":443,"targetPort":8443,"nodePort":30443}]}}'
service/kubernetes-dashboard patched
[root@leoheng-k8s ~]# 
[root@leoheng-k8s ~]# kubectl -n kubernetes-dashboard get svc
NAME                        TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)         AGE
dashboard-metrics-scraper   ClusterIP   10.103.142.217   <none>        8000/TCP        38m
kubernetes-dashboard        NodePort    10.102.207.104   <none>        443:30443/TCP   38m
[root@leoheng-k8s ~]#

2.修改yaml文件

[root@leoheng-k8s ~]# wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta8/aio/deploy/recommended.yaml
[root@leoheng-k8s ~]# vim recommended.yaml
---

kind: Service
apiVersion: v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
spec:
  type: NodePort
  ports:
    - port: 443
      targetPort: 8443
      nodePort: 30443
  selector:
    k8s-app: kubernetes-dashboard

---
[root@leoheng-k8s ~]# kubectl  apply -f recommended.yaml 
namespace/kubernetes-dashboard unchanged
serviceaccount/kubernetes-dashboard unchanged
service/kubernetes-dashboard configured
secret/kubernetes-dashboard-certs unchanged
secret/kubernetes-dashboard-csrf configured
Warning: resource secrets/kubernetes-dashboard-key-holder is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.
secret/kubernetes-dashboard-key-holder configured
configmap/kubernetes-dashboard-settings unchanged
role.rbac.authorization.k8s.io/kubernetes-dashboard unchanged
clusterrole.rbac.authorization.k8s.io/kubernetes-dashboard unchanged
rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard unchanged
clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard unchanged
deployment.apps/kubernetes-dashboard configured
service/dashboard-metrics-scraper unchanged
deployment.apps/dashboard-metrics-scraper configured
[root@leoheng-k8s ~]#

3.访问dashboard

4.设置Token登陆

[root@leoheng-k8s ~]# vim dashboard-adminuser.yaml
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kubernetes-dashboard
[root@leoheng-k8s ~]# kubectl apply -f dashboard-adminuser.yaml 
serviceaccount/admin-user created
clusterrolebinding.rbac.authorization.k8s.io/admin-user created

5.查看admin-user的Token

[root@leoheng-k8s ~]# kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk '{print $1}')
Name:         admin-user-token-nrmsh
Namespace:    kubernetes-dashboard
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: admin-user
              kubernetes.io/service-account.uid: 04d641c1-8c79-4d9d-a0e3-e82f00a4be24

Type:  kubernetes.io/service-account-token

Data
====
ca.crt:     1066 bytes
namespace:  20 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IlJ2dEhEMGd6d1pSeHhFN3pvYWwydVozME5LVjNXU1lPLWlHLWd0d3dEdTAifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi11c2VyLXRva2VuLW5ybXNoIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImFkbWluLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiIwNGQ2NDFjMS04Yzc5LTRkOWQtYTBlMy1lODJmMDBhNGJlMjQiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZXJuZXRlcy1kYXNoYm9hcmQ6YWRtaW4tdXNlciJ9.nTXBsiU3QbJa-rsayHvIYokvhnwH51E0fzCOngMaS1lTzO9ew2Uxk7s_s_MReJos3T3IiM-Nz5VahnqeT6r3T84yx0YQ32m2k9kVLn-XNvj0MurI-jJJgPKHhkCG7M9wBEG8gA_zlpdA5qyvKsECym4uOpe5vsSMYELnOSq4t52xD-P6nbrLZnW3I7Io9DSSW5iatxLgUdF7DW3ZO6HTJ-2ja8nkGaxH5rIvgR5518hZpvUcw8mo7IPdNEYc1wkpFuQVavJvjPS2DtDd68k3p51-MbHwhKLrEMr1ULWwVLXPmymVLzrOCbamhtz4FOOMAgouIS_1mkZ69xunSnpaWw
[root@leoheng-k8s ~]#

6.在网页上选择Token之后，把步骤5生成的Token值贴进去即可

本文作者： Leoheng
本文链接： http://www.leoheng.com/2021/01/31/K8S部署-Dashboard-UI/
版权声明： Design by leoheng