Kubernetes 1.8.4 手动安装教程-安装Dashboard(七)
2019独角兽企业重金招聘Python工程师标准>>>
Dashboard
Dashboard 是 Kubernetes 社区官方开发的仪表板,有了仪表板后管理者就能够透过 Web-based 方式来管理 Kubernetes 集群,除了提升管理方便,也让资源可视化,让人更直觉看见系统信息的呈现结果。
- 建立kubernetes-dashboard-certs,来提供给 Dashboard TLS 使用
mkdir -p /etc/kubernetes/addons/certs && cd /etc/kubernetes/addons openssl genrsa -des3 -passout pass:x -out certs/dashboard.pass.key 2048 openssl rsa -passin pass:x -in certs/dashboard.pass.key -out certs/dashboard.key openssl req -new -key certs/dashboard.key -out certs/dashboard.csr -subj '/CN=kube-dashboard' openssl x509 -req -sha256 -days 365 -in certs/dashboard.csr -signkey certs/dashboard.key -out certs/dashboard.crt rm certs/dashboard.pass.key kubectl create secret generic kubernetes-dashboard-certs\--from-file=certs -n kube-system
在master通过 kubectl 来建立 kubernetes dashboard 即可
cat <<EOF > kube-dashboard.yml # Copyright 2017 The Kubernetes Authors. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License.# Configuration to deploy release version of the Dashboard UI compatible with # Kubernetes 1.8. # # Example usage: kubectl create -f <this_file># ------------------- Dashboard Secret ------------------- #apiVersion: v1 kind: Secret metadata:labels:k8s-app: kubernetes-dashboardname: kubernetes-dashboard-certsnamespace: kube-system type: Opaque--- # ------------------- Dashboard Service Account ------------------- #apiVersion: v1 kind: ServiceAccount metadata:labels:k8s-app: kubernetes-dashboardname: kubernetes-dashboardnamespace: kube-system--- # ------------------- Dashboard Role & Role Binding ------------------- #kind: Role apiVersion: rbac.authorization.k8s.io/v1 metadata:name: kubernetes-dashboard-minimalnamespace: kube-system rules:# Allow Dashboard to create 'kubernetes-dashboard-key-holder' secret. - apiGroups: [""]resources: ["secrets"]verbs: ["create"]# Allow Dashboard to get, update and delete Dashboard exclusive secrets. - apiGroups: [""]resources: ["secrets"]resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs"]verbs: ["get", "update", "delete"]# Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map. - apiGroups: [""]resources: ["configmaps"]resourceNames: ["kubernetes-dashboard-settings"]verbs: ["get", "update"]# Allow Dashboard to get metrics from heapster. - apiGroups: [""]resources: ["services"]resourceNames: ["heapster"]verbs: ["proxy"]--- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata:name: kubernetes-dashboard-minimalnamespace: kube-system roleRef:apiGroup: rbac.authorization.k8s.iokind: Rolename: kubernetes-dashboard-minimal subjects: - kind: ServiceAccountname: kubernetes-dashboardnamespace: kube-system--- # ------------------- Dashboard Deployment ------------------- #kind: Deployment apiVersion: apps/v1beta2 metadata:labels:k8s-app: kubernetes-dashboardname: kubernetes-dashboardnamespace: kube-system spec:replicas: 1revisionHistoryLimit: 10selector:matchLabels:k8s-app: kubernetes-dashboardtemplate:metadata:labels:k8s-app: kubernetes-dashboardspec:containers:- name: kubernetes-dashboardimage: registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.8.0imagePullPolicy: IfNotPresentports:- containerPort: 8443protocol: TCPargs:- --tls-key-file=dashboard.key- --tls-cert-file=dashboard.crt#- --auto-generate-certificates# Uncomment the following line to manually specify Kubernetes API server Host# If not specified, Dashboard will attempt to auto discover the API server and connect# to it. Uncomment only if the default does not work.# - --apiserver-host=http://my-address:portvolumeMounts:- name: kubernetes-dashboard-certsmountPath: /certs# Create on-disk volume to store exec logs- mountPath: /tmpname: tmp-volumelivenessProbe:httpGet:scheme: HTTPSpath: /port: 8443initialDelaySeconds: 30timeoutSeconds: 30volumes:- name: kubernetes-dashboard-certssecret:secretName: kubernetes-dashboard-certs- name: tmp-volumeemptyDir: {}serviceAccountName: kubernetes-dashboard# Comment the following tolerations if Dashboard must not be deployed on mastertolerations:- key: node-role.kubernetes.io/mastereffect: NoSchedule--- # ------------------- Dashboard Service ------------------- #kind: Service apiVersion: v1 metadata:labels:k8s-app: kubernetes-dashboardname: kubernetes-dashboardnamespace: kube-system spec:ports:- port: 443targetPort: 8443selector:k8s-app: kubernetes-dashboard EOF
kubectl apply -f kube-dashboard.yml
cat <<EOF >kube-dashboard-admin.yml apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding metadata: name: kubernetes-dashboard labels: k8s-app: kubernetes-dashboard roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: kubernetes-dashboard namespace: kube-system EOF
kubectl apply -f kube-dashboard-admin.yml
kubectl -n kube-system get po,svc -l k8s-app=kubernetes-dashboard
完成后,就可以透过浏览器访问 Dashboard
https://10.0.0.162:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/
转载于:https://my.oschina.net/ytqvip/blog/1603951
Kubernetes 1.8.4 手动安装教程-安装Dashboard(七)相关推荐
- maven安装教程安装教程_Maven教程之春
maven安装教程安装教程 1.简介 在这篇文章中,我们将演示如何针对非常特定的用例对Spring使用Maven依赖项. 我们使用的所有库的最新版本都可以在Maven Central上找到. 对于一个 ...
- swapidc不能连接到主机_swapidc 安装教程 安装/启动 插件教程
在教程开始前,用户得先买一个vps或者服务器,初学者建议购买vps. SWAPidc小白教程 图文 我们先注册个账号 在www.swapidc.com 这里不演示了自己注册 1.先登录云中心下载源码( ...
- Virtual Box 安装教程/安装步骤
第一步:运行安装程序(双击打开) 第二步:点击下一步进行开始安装 第三步:根据需要决定是否需要修改软件的安装位置 第四步:安装的选项设置 点击下一步 第五步:断网警告,点击是即可 第六步:点击安装,进 ...
- Linux 下 GitLab 安装教程
Linux 下 GitLab 安装教程 安装 Linux 下载 GitLab 安装 GitLab 登录 GitLab GitLab 汉化 GitLab 设置密钥 卸载 GitLab 为了便于以后使用, ...
- Bty全国首个PHP宝塔,宝塔Bty分销系统 Bty3安装教程
摘要: 安装教程安装宝塔面板安装 Bty 程序宝塔面板安装(≥3.7)宝塔面板安装(< 3.7)一键部署 Bty其他安装方法计划任务(监控)1) 安装宝塔面板1. 官方命令进入官网2... 安装 ...
- 华硕A456UR7500初次非完美黑苹果安装教程
安装的系统版本 10.13.2 MacOS High Sierra(2017年12月6日发布) 目录 安装的系统版本 目录 首先要说的 需要准备的东西 安装的环境 安装步骤 1.制作启动U盘 2.安装 ...
- 苹果cmsv10采集插件+安装教程
[苹果cms V10采集插件]+[安装教程] 直接在苹果cms后台的应用内离线安装即可! 安装教程 安装教程直接看图即可! 第一步先进后台的应用 第二步是点击应用中的应用市场 第三步是点击应用市场中的 ...
- mysql8.0mis安装教程
[如果之前安装过MySQL,需要将之前的MySQL卸载干净之后,再重新安装. ] MySQL8.0 msi 版本安装教程 目录 MySQL8.0 msi 版本安装教程 安装MySQL 配置环境变量 验 ...
- JMeter 下载安装教程
JMeter 下载安装教程 安装 Java 下载 JMeter 关闭 SSL JMeter 汉化 设置 JMeter 主题 设置 Cookie 运行 JMeter 笔者的环境: JMeter 5.4. ...
最新文章
- s:if 标签 字符串比较 正确用法和错误用法
- 腾讯云centos7搭建javaweb服务器(本人亲自经历,详细)
- 链表基本功能:初始化、增、删、查、改
- 朴素贝叶斯(Naive Bayes),“Naive”在何处?
- 利用SAML证书登陆vCenter
- CDN高级技术专家周哲:深度剖析短视频分发过程中的用户体验优化技术点
- java9 堆外内存_java堆外内存泄漏排查
- SQL必知必会-存储过程
- 循环链表(约瑟夫环问题)
- MAC安装软件 brew 问题记录
- Win8 MSDN 简中/繁中/英文正式版下载(微软官方原版)
- 【MFC】解决窗口大小改变之后,ComboBox当前选项文字出现蓝色背景
- 无线网络连接 wlan test
- 鸿鹄系统和鸿蒙系统的区别,华为鸿蒙系统和全新的鸿鹄处理器将于8月9日正式发布,荣耀首发...
- 启用共享文件夹服务器,Windows Server 2008 启用公共文件夹共享
- pytorch实现GAN
- Java减肥高手Xtend 捆绑Eclipse IDE
- 苹果手机iframe撑大父页解决办法
- 心血漏洞第二发?SSL v3再曝新漏洞发布预警
- 男朋友在武汉当程序员,月薪到手15k左右