Kubeenetes Dashboard admin-kubeconfig

1. 部署kuberdashboard

#  wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.3/aio/deploy/recommended.yaml# vim  recommended.yaml ///需修改kind: Service
apiVersion: v1
metadata:labels:k8s-app: kubernetes-dashboardname: kubernetes-dashboardnamespace: kubernetes-dashboard
spec:type: NodePort //添加typeports:- port: 443nodePort: 30001 //dashboard端口targetPort: 8443selector:k8s-app: kubernetes-dashboard

执行如下命令可创建dashboard

kubectl apply -f recommended.yaml

2. 部署admin-user

创建 Service Account 和 ClusterRoleBinding

使用 kubeadm 安装集群时，默认创建了 ClusterRole cluster-admin。此时我们可以直接为刚才的 ServiceAccount 创建 ClusterRoleBinding。


# vim admin-user.yaml // apiVersion: v1
kind: ServiceAccount
metadata:name: admin-usernamespace: kubernetes-dashboard---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: admin-user
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: cluster-admin
subjects:
- kind: ServiceAccountname: admin-usernamespace: kubernetes-dashboard

执行如下命令可创建 ServiceAccount 和 ClusterRoleBinding

# kubectl apply -f admin-user.yaml

3. 找到admin.conf

root@k8s-master1:~# cd /etc/kubernetes/
root@k8s-master1:/etc/kubernetes# ls
admin.conf  controller-manager.conf  kubelet.conf  manifests  pki  scheduler.conf
root@k8s-master1:/etc/kubernetes#

4. admin.conf填入token

s# kubectl get secret -A |grep admin
kubernetes-dashboard   admin-user-token-c7xlw  //admin token                         kubernetes.io/service-account-token   3      24m# kubectl describe secret admin-user-token-c7xlw -n kubernetes-dashboard
Name:         admin-user-token-c7xlw
Namespace:    kubernetes-dashboard
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: admin-userkubernetes.io/service-account.uid: c0668784-4d13-467e-ab6e-f0bc040e7aeaType:  kubernetes.io/service-account-tokenData
====
token:   //token    eyJhbGciOiJSUzI1NiIsImtpZCI6InpJaTAxbHAtZ0dyX0Myb3djZmJpT1VrRlN3SzdWQ1htamtNMHpNRWkwVlUifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi11c2VyLXRva2VuLWM3eGx3Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImFkbWluLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiJjMDY2ODc4NC00ZDEzLTQ2N2UtYWI2ZS1mMGJjMDQwZTdhZWEiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZXJuZXRlcy1kYXNoYm9hcmQ6YWRtaW4tdXNlciJ9.iJE8P4X8sGQ95czJ-R1BplULFiIXr7MFw_ysSIS24YbZIKouN3Ankl7hNeRm8vVEIBPC8kizmzv0go9hfc2i2Kg51Ni5-unXZX7kIe1Lj8Ko24N1lV2Ryw6mP9KjZelbawcF-kmDpbPV8xElg6zWG-3JRuxlFM3tIT1i-4ocweG3-bBucnf890zeQsVOr9_sgJto_pHhgH-RqjfIV2AHKiNa5ukIGt8DNgMKsqbwk1jtFw2HLq-5McNcRIapFXgMsAK1F_awQXcGKFqUeuB92DWrdJDunEoxRp-16lTWkNTGWGvFu0E-g_dbgy-z8fMw9pLL_pDbY4_c7wyrI377IQ
ca.crt:     1025 bytes
namespace:  20 bytes

将以上token填入admin.conf：示例

apiVersion: v1
clusters:
- cluster:certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5RENDQWJDZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJd01EY3hPREV6TURBMU1Gb1hEVE13TURjeE5qRXpNREExTUZvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTUE5ClNNWDR4c2NRY09MT3ZHUkVrbkFyK3JEUitCelpVZUUrdVJHclk0U1lxL09mNXRBVDRxT1Iwb25oMkxxVmU3blMKSTRsdFEwMmgvMnZORU82U2FodkJUaStpVndjVEZPSDNTVWF1MnlVcmFOYXJua0xCTTZRdm1kV3hyN21sUkJOYwp5UlgvWUJWVWhhSyt2bGhEV2NYRFJlckdrZmxqRUxFRTkzYUtSTGwzWG1yMlFva0w4eTBMOHNzdE9LS0E5RmxzCnJWbXBpTCtBOGlZSEtIYnFaVENDNEJGSU4vN3lKYUFRaHFXQVQ4MFFUcFRKQWdQYUg2N1B3S1JGM1ByWG1OUGkKTk1EMHVNY1VTZDUwT2JmU2pOZzJJcUQrL25VZVpoVWFURDJwc1A5L1hBSnZ2cS81MEN4N2hmai9ibVJNQnhzdQpweGszQzM3bWVENm14YWxVLzA4Q0F3RUFBYU1qTUNFd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFHS1laMnFvTHNhT2xjOEdhZUxqOVpnNUorTEEKOUNuQ3VBalQ3endYa3ZSdEJQZXNLVk1FcXRlNytiOG1MTVNVdEhCT2E4ZzBrNWRwa3ZXRFJ3VE5iZHFSZmptaQo2YzJyT0g1NHFQUURXd0RBR0p0NllJQXVmYnJoYTJGc3phSTBpRnhmOG0zaFhxVGZrWmRPazhUc2Q4V0Q0REovCm5rZjdSQmszL3RPUTBPUk9VSm5ONStpcFVPNkt0aFl5L0YvTzdDTVhmUm9OVFI2OVFId01FeldlaTNZRlRlSVIKOFI0U3JrTUU3dzRxUUNURHFDQ3ZHTlQ5OHFEY2U5Q2t1N051a1RTUTVxcXhUaFNISVk4Z3NQWmxzTWtBUVZpYwpWWnprbWxWSFBmTy8veldwdW1MMnJFL2FKbkJCd2NkN2tnY1E4cjNhcTMxZUk0VzNscXB6TERnZmg5az0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=server: https://172.20.21.248:6443name: kubernetes
contexts:
- context:cluster: kubernetesuser: kubernetes-adminname: kubernetes-admin@kubernetes
current-context: kubernetes-admin@kubernetes
kind: Config
preferences: {}
users:
- name: kubernetes-adminuser:client-certificate-data: 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client-key-data: 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token: eyJhbGciOiJSUzI1NiIsImtpZCI6InpJaTAxbHAtZ0dyX0Myb3djZmJpT1VrRlN3SzdWQ1htamtNMHpNRWkwVlUifQ.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.iJE8P4X8sGQ95czJ-R1BplULFiIXr7MFw_ysSIS24YbZIKouN3Ankl7hNeRm8vVEIBPC8kizmzv0go9hfc2i2Kg51Ni5-unXZX7kIe1Lj8Ko24N1lV2Ryw6mP9KjZelbawcF-kmDpbPV8xElg6zWG-3JRuxlFM3tIT1i-4ocweG3-bBucnf890zeQsVOr9_sgJto_pHhgH-RqjfIV2AHKiNa5ukIGt8DNgMKsqbwk1jtFw2HLq-5McNcRIapFXgMsAK1F_awQXcGKFqUeuB92DWrdJDunEoxRp-16lTWkNTGWGvFu0E-g_dbgy-z8fMw9pLL_pDbY4_c7wyrI377IQ

5. 测试

https://172.20.21.101:30001

Kubeenetes Dashboard admin-kubeconfig相关推荐

Kubernetes Dashboard - 每天5分钟玩转 Docker 容器技术（173）
前面章节 Kubernetes 所有的操作我们都是通过命令行工具 kubectl 完成的.为了提供更丰富的用户体验,Kubernetes 还开发了一个基于 Web 的 Dashboard,用户可以用 ...
ASP.NET Core on K8S深入学习（7）Dashboard知多少
本篇已加入<.NET Core on K8S学习实践系列文章索引>,可以点击查看更多容器化技术相关系列文章. 在第二篇<部署过程解析与Dashboard>中介绍了如何部署Das ...
Ratel-Kubernetes Dashboard 一键式 Kubernetes多集群资源管理平台 k8s 管理平台
github开源项目:https://github.com/dotbalo/ratel-doc 1.介绍 Ratel是什么? Ratel是一个Kubernetes多集群资源管理平台,基于管理Kuber ...
部署Kubernetes集群+Dashboard可视化页面-1.18.6版本
Kubeadm 部署 Kubernetes1.18.6 集群一.环境说明主机名 IP地址角色系统 k8s-master 192.168.182.150 k8s-master Centos7.6 ...
k8s 集群部署(dashboard+metrics-server)
Kubeadm 部署 Kubernetes1.18.6 集群一.kubeadm 工作原理 kubeadm 是 Kubernetes 主推的部署工具之一,正在快速迭代开发中. 1.初始化系统所有机器 ...
kubernetes部署dashboard可视化插件
Dashboard简介在 Kubernetes 社区中,有一个很受欢迎的 Dashboard 项目,它可以给用户提供一个可视化的 Web 界面来查看当前集群的各种信息.用户可以用 Kubernete ...
部署k8s dashboard
1 前提已通过kubeadm搭建集群环境,具体可参考--使用kubeadm部署k8s 1.15集群--基于CentOS 7 2 创建dashboard应用直接使用官网提供的yaml文件, kube ...
IAAS基于开源openstack框架搭建云计算平台和各组件基础搭建内容包括mysql、keyston、Glance、Nova、Neutron、Dashboard、Heat、Trove等
1.根据平台安装步骤安装至数据库服务,使用一条命令安装提供的 iaas-install-mysql.sh 脚本并查看脚本运行的时间,把命令和最后输出的时间信息提交到答题框. [root@contro ...
部署 Dashboard可视化插件
dashboard可以给用户提供一个可视化的 Web 界面来查看当前集群的各种信息.用户可以用 Kubernetes Dashboard 部署容器化的应用.监控应用的状态.执行故障排查任务以及管理 K ...
Kubernetes v1.10.x HA 全手动安装教程(TL;DR)
转自 https://www.kubernetes.org.cn/3814.html 本篇延续过往手动安装方式来部署 Kubernetes v1.10.x 版本的 High Availability ...

Kubeenetes Dashboard admin-kubeconfig

Kubeenetes Dashboard admin-kubeconfig

1. 部署kuberdashboard

2. 部署admin-user

3. 找到admin.conf

4. admin.conf填入token

5. 测试

Kubeenetes Dashboard admin-kubeconfig相关推荐

最新文章

热门文章