标签：kubectl kubernetes admin -- token UI dashboard k8s

百度网盘链接：https://pan.baidu.com/s/15t_TSH5RRpCFXV-93JHpNw?pwd=8od3 提取码：8od3

10 安装k8s可视化UI界面dashboard

10.1 安装dasboard

把安装kubernetes-dashboard需要的镜像上传到工作节点node1和node2，手动解压

# docker load -i dashboard_2_0_0.tar.gz

# docker load -i metrics-scrapter-1-0-1.tar.gz

安装dashboard组件

在master1节点操作如下命令:

# kubectl apply -f kubernetes-dashboard.yaml

查看dashboard的状态

# kubectl get pods -n kubernetes-dashboard

查看dashboard前端的service

# kubectl get svc -n kubernetes-dashboard

显示如下：

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

dashboard-metrics-scraper ClusterIP 10.98.221.57 <none> 8000/TCP

kubernetes-dashboard ClusterIP 10.97.37.171 <none> 443/TCP

修改service type类型变成NodePort

# kubectl edit svc kubernetes-dashboard -n kubernetes-dashboard

把type: ClusterIP变成 type: NodePort，保存退出即可。

# kubectl get svc -n kubernetes-dashboard

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

dashboard-metrics-scraper ClusterIP 10.98.221.57 <none> 8000/TCP

kubernetes-dashboard NodePort 10.97.37.171 <none> 443:32728/TCP 2m50s

上面可看到service类型是NodePort，访问任何一个工作节点ip: 32728端口即可访问kubernetes dashboard，在浏览器访问如下地址:

https://192.168.40.180:32728/

可看到出现了dashboard界面

10.2 通过token令牌访问dashboard

通过Token登陆dashboard

创建管理员token，具有查看任何空间的权限，可以管理所有资源对象

# kubectl create clusterrolebinding dashboard-cluster-admin --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:kubernetes-dashboard

查看kubernetes-dashboard名称空间下的secret

# kubectl get secret -n kubernetes-dashboard

NAME TYPE DATA AGE

default-token-n2x5n kubernetes.io/service-account-token 3

kubernetes-dashboard-certs Opaque 0

kubernetes-dashboard-csrf Opaque 1

kubernetes-dashboard-key-holder Opaque 2

kubernetes-dashboard-token-ppc8c kubernetes.io/service-account-token 3

找到对应的带有token的kubernetes-dashboard-token-ppc8c

# kubectl describe secret kubernetes-dashboard-token-ppc8c -n kubernetes-dashboard

#显示如下：

---

token: eyJhbGciOiJSUzI1NiIsImtpZCI6IlVNalJOeHBacEYxZ0tieTJKR2ZVY1hvTHZvcVVBU3FPaTU4TGhreDd5VzQifQ.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.CKSwwXQfwF-HA_giAC1jzTmEnMjA73FtNpMjhI_coLOakc-MBX8f74K4k-TGMfBVFwqcvzBnCBOQJ2OJCgZX-YI109d4PDE9rGO3SK0OGIaLVDafB_9aoMeuMyrsut0PwgZoynUwA_DrwhOFkneNsA93rCIQck1WWOvxbrUtttmhvMDzYSZu6-TcGx6pxEiHwOEQ5dx92Tv6nSIBS_tjHU-CElQMhcHcHsD6AF-WdhSF2QtnvcCGasCcBPXzKF8cqd_QdvZvMgcUuwhUBVRRCEc_MCHDqGQBXZ6EzRE0PoXW_S6Rd1zvzT5SVFrgL3xGikPHTxWP2DurNZuCHmFnMw

记住token后面的值，把下面的token值复制到浏览器token登陆处即可登陆：

点击sing in登陆，显示如下，这次就可以看到和操作任何名称空间的资源了

10.3 通过kubeconfig文件访问dashboard

10.3.1 创建cluster集群

# cd /etc/kubernetes/pki

# kubectl config set-cluster kubernetes --certificate-authority=./ca.crt --server="https://192.168.40.180:6443" --embed-certs=true --kubeconfig=/root/dashboard-admin.conf

# cat /root/dashboard-admin.conf

apiVersion: v1

clusters:

- cluster:

certificate-authority-data: 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

server: https://192.168.40.180:6443

contexts: null

current-context: ""

kind: Config

preferences: {}

users: null

10.3.2 创建credentials

创建credentials需要使用上面的kubernetes-dashboard-token-ppc8c对应的token信息

# DEF_NS_ADMIN_TOKEN=$(kubectl get secret kubernetes-dashboard-token-ppc8c -n kubernetes-dashboard -o jsonpath={.data.token}|base64 -d)

# kubectl config set-credentials dashboard-admin --token=$DEF_NS_ADMIN_TOKEN --kubeconfig=/root/dashboard-admin.conf

# cat /root/dashboard-admin.conf

apiVersion: v1

clusters:

- cluster:

server: https://192.168.40.180:6443

contexts: null

current-context: ""

kind: Config

preferences: {}

users:

- name: dashboard-admin

user:

10.3.3 创建context

# kubectl config set-context dashboard-admin@kubernetes --cluster=kubernetes --user=dashboard-admin --kubeconfig=/root/dashboard-admin.conf

# cat /root/dashboard-admin.conf

apiVersion: v1

clusters:

- cluster:

server: https://192.168.40.180:6443

contexts:

- context:

cluster: kubernetes

user: dashboard-admin

current-context: ""

kind: Config

preferences: {}

users:

- name: dashboard-admin

user:

10.3.4 切换context的current-context是dashboard-admin@kubernetes

# kubectl config use-context dashboard-admin@kubernetes --kubeconfig=/root/dashboard-admin.conf

# cat /root/dashboard-admin.conf

apiVersion: v1

clusters:

- cluster:

server: https://192.168.40.180:6443

contexts:

- context:

cluster: kubernetes

user: dashboard-admin

current-context: dashboard-admin@kubernetes

kind: Config

preferences: {}

users:

- name: dashboard-admin

user:

10.3.5 把刚才的kubeconfig文件dashboard-admin.conf复制到桌面

浏览器访问时使用kubeconfig认证，把刚才的dashboard-admin.conf导入到web界面，那么就可以登陆了

把dashboard-admin.conf文件导入

12.4 通过kubernetes-dashboard创建容器

把nginx.tar.gz镜像压缩包上传到node1和node2上，手动解压：

# docker load -i nginx.tar.gz

打开kubernetes的dashboard界面（https://192.168.40.180:32728/），点开右上角红色箭头标注的 “+”，如下图所示：

点击“+”出现如下界面：

选择Create from form

上面箭头标注的地方填写之后点击Deploy即可完成Pod的创建，如下：

在dashboard的左侧选择Services

上图可看到刚才创建的nginx的service在宿主机映射的端口是31135，在浏览器访问：

192.168.40.180:31135

看到如下界面，说明nginx部署成功了：

注：表单中创建pod时没有创建nodeport的选项，会自动创建在30000+以上的端口。

关于port、targetport、nodeport的说明：

nodeport是集群外流量访问集群内服务的端口，比如客户访问nginx，apache，

port是集群内的pod互相通信用的端口类型，比如nginx访问mysql，而mysql是不需要让客户访问到的，port是service的的端口

targetport目标端口，也就是最终端口，也就是pod的端口。

标签：kubectl,kubernetes,admin,--,token,UI,dashboard,k8s
From： https://www.cnblogs.com/KrillLiszt/p/16912226.html

安装k8s可视化UI界面dashboard

10 安装k8s可视化UI界面dashboard

10.1 安装dasboard

10.2 通过token令牌访问dashboard

10.3 通过kubeconfig文件访问dashboard

10.3.1 创建cluster集群

10.3.2 创建credentials

10.3.3 创建context

10.3.4 切换context的current-context是dashboard-admin@kubernetes

10.3.5 把刚才的kubeconfig文件dashboard-admin.conf复制到桌面

12.4 通过kubernetes-dashboard创建容器

相关文章

赞助商

阅读排行