部署 Dashboard可视化插件

dashboard可以给用户提供一个可视化的 Web 界面来查看当前集群的各种信息。用户可以用 Kubernetes Dashboard 部署容器化的应用、监控应用的状态、执行故障排查任务以及管理 Kubernetes 各种资源

Kubernetes-Dashboard 的安装步骤主要有以下几步：

安装部署 kubernetes-dashboard

创建访问账户

访问 kubernetes-dashboard 的 UI 界面

安装dashboard

[root@k8s-master ~]# curl https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml > kubernetes-dashboard.yaml

% Total    % Received % Xferd Average Speed   Time    Time     Time Current

Dload Upload   Total   Spent    Left Speed

100 4577 100 4577    0     0   7527      0 --:--:-- --:--:-- --:--:-- 7540

[root@k8s-master ~]# sed -i "s/k8s.gcr.io/registry.cn-hangzhou.aliyuncs.com\/google_containers/g" ./kubernetes-dashboard.yaml

[root@k8s-master ~]# kubectl apply -f kubernetes-dashboard.yaml

secret/kubernetes-dashboard-certs created

serviceaccount/kubernetes-dashboard created

role.rbac.authorization.k8s.io/kubernetes-dashboard-minimal created

rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard-minimal created

deployment.apps/kubernetes-dashboard created

service/kubernetes-dashboard created

访问地址：

https://<MASTER_IP>:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/

Dashboard 支持 Kubeconfig 和 Token 两种认证方式，我们这里选择Token认证方式登录：

创建登录用户
 [root@k8s-master ~]# cat > dashboard_service_account_admin.yaml << EOF
> apiVersion: v1
> kind: ServiceAccount
> metadata:
>   name: admin-user
>   namespace: kube-system
> EOF
[root@k8s-master ~]# kubectl apply -f dashboard_service_account_admin.yaml

Warning: kubectl apply should be used on resource created by either kubectl create --save-config or kubectl apply

serviceaccount/admin-user configured

创建集群角色绑定
[root@k8s-master ~]# cat > dashboard_cluster_role_binding_admin.yaml << EOF
> apiVersion: rbac.authorization.k8s.io/v1
> kind: ClusterRoleBinding
> metadata:
>   name: admin-user
> roleRef:
>   apiGroup: rbac.authorization.k8s.io
>   kind: ClusterRole
>   name: cluster-admin
> subjects:
> - kind: ServiceAccount
>   name: admin-user
>   namespace: kube-system
> EOF
[root@k8s-master ~]# kubectl apply -f dashboard_cluster_role_binding_admin.yaml

Warning: kubectl apply should be used on resource created by either kubectl create --save-config or kubectl apply

clusterrolebinding.rbac.authorization.k8s.io/admin-user configured

获取用户登录 Token:

[root@k8s-master ~]# kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}') > admin-token.yaml && cat admin-token.yaml

Name:         admin-user-token-ztr5d

Namespace:    kube-system

Labels:       <none>

Annotations: kubernetes.io/service-account.name: admin-user

kubernetes.io/service-account.uid: 2e6cb0ae-0442-431f-9a57-1d7fbf2c06b5

Type: kubernetes.io/service-account-token

Data

====

token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi11c2VyLXRva2VuLXp0cjVkIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImFkbWluLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiIyZTZjYjBhZS0wNDQyLTQzMWYtOWE1Ny0xZDdmYmYyYzA2YjUiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZS1zeXN0ZW06YWRtaW4tdXNlciJ9.Myu3i6HKxE9InMCPiS3GPbLAWoad5GLthYtHSynELjrA6D0H8PuYuhy93tpXfnS5DJHYer2j1gCXKIOcjzZ5J7BREckgqjOdJNKmh8dkGhVirf6NAvtrNyGMv1cJT9rOY6Z6V-RnM--H_4nFt6JRRdyuoOp8j1UO7ae5yob72K7-vQB7dPKl0T0dJFZyTGE_65Bm4YGreGgzdH44PmWa9rzWnbpfx1tW3pTNO-PQXjibtSBj2io1Wc4iO50wI7TB7DBQ0rOBqaue-_GvbLPNlB0f9HsBk2my2KBFLNGtPJGxcAxYngQSicu-DDM-_tbP15czDSpyC1fwfKbzh6Qx1g

ca.crt:     1025 bytes

namespace: 11 bytes

[root@k8s-master ~]# grep 'client-certificate-data' $HOME/.kube/config | head -n 1 | awk '{print $2}' | base64 -d >> kubecfg.crt

[root@k8s-master ~]# grep 'client-key-data' $HOME/.kube/config | head -n 1 | awk '{print $2}' | base64 -d >> kubecfg.key

[root@k8s-master ~]# openssl pkcs12 -export -clcerts -inkey kubecfg.key -in kubecfg.crt -out kubecfg.p12 -name "kubernetes-web-client"

Enter Export Password: #密码自己设置

Verifying - Enter Export Password:

把获取到的Token复制到登录界面的Token输入框中:

https://192.168.2.243:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#!/login

成功登陆dashboard:

部署 Dashboard可视化插件相关推荐

kubernetes部署dashboard可视化插件
Dashboard简介在 Kubernetes 社区中,有一个很受欢迎的 Dashboard 项目,它可以给用户提供一个可视化的 Web 界面来查看当前集群的各种信息.用户可以用 Kubernete ...
Kubernetes 1.22.9搭建和部署dashboard可视化UI
文章目录前言集群规划 kubernetes的安装 dash board可视化UI的安装前言参考博客:https://blog.csdn.net/qq_41632602/article/deta ...
09-2.部署 dashboard 插件
09-2.部署 dashboard 插件修改配置文件将下载的 kubernetes-server-linux-amd64.tar.gz 解压后,再解压其中的 kubernetes-src.tar. ...
部署Kubernetes集群+Dashboard可视化页面-1.18.6版本
Kubeadm 部署 Kubernetes1.18.6 集群一.环境说明主机名 IP地址角色系统 k8s-master 192.168.182.150 k8s-master Centos7.6 ...
k8s部署dashboard
1.dashboard概述 Dashboard是基于网页的Kubernetes用户界面.您可以使用Dashboard将容器应用部署到Kubernetes集群中,也可以对容器应用排错,还能管理集群资源. ...
[转】：VS 2010 : 如何开发和部署Outlook 2010插件(Add-in)
VS 2010 : 如何开发和部署Outlook 2010插件(Add-in) 转自: http://guofblog.blog.163.com/blog/static/168088614201062 ...
ASP.NET Core on K8S深入学习（2）部署过程解析与部署Dashboard
上一篇<K8S集群部署>中搭建好了一个最小化的K8S集群,这一篇我们来部署一个ASP.NET Core WebAPI项目来介绍一下整个部署过程的运行机制,然后部署一下Dashboard,完 ...
k8s dashboard_ASP.NET Core on K8S深入学习（2）部署过程解析与部署Dashboard
文章转载于公众号[恰同学骚年],作者Edison Zhou 上一篇<K8S集群部署>中搭建好了一个最小化的K8S集群,这一篇我们来部署一个ASP.NET Core WebAPI项目来介绍一 ...
K8s安装dashboard可视化界面
部署dashboard kubernetes官方提供可视化界面 1.使用网络拉取yaml文件 kubectl apply -f https://raw.githubusercontent.com/ku ...

部署 Dashboard可视化插件

部署 Dashboard可视化插件相关推荐

最新文章

热门文章