天津企业如何建网站软装设计培训机构
本文内容以语雀为准
说明
Kubernetes Dashboard 是一个通用的、基于Web的UI,用于Kubernetes集群管理。
 它允许用户管理群集中运行的应用程序并对其进行故障排除,以及管理群集本身。
 不同 Kubernetes Dashboard 支持的 Kubernetes 版本不同,可查看 Kubernetes Dashboard 发版日志中的说明:https://github.com/kubernetes/dashboard/releases ,下面列举最近几版的版本支持(仅列举了 完全支持的版本范围)
 国内GitCode镜像仓库:https://gitcode.net/mirrors/kubernetes/dashboard
 使用网址如:https://gitcode.net/mirrors/kubernetes/dashboard/-/raw/v2.7.0/aio/deploy/recommended.yaml ,只需要换一下标签名
| Kubernetes Dashboard 版本 | Kubernetes 版本 | |
|---|---|---|
| 2.7.0 | 1.25 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml | 
| 2.6.1 | 1.24 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.6.1/aio/deploy/recommended.yaml | 
| 2.6.0 | 1.24 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.6.0/aio/deploy/recommended.yaml | 
| 2.5.1 | 1.23 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yaml | 
| 2.5.0 | 1.23 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.0/aio/deploy/recommended.yaml | 
| 2.4.0 | 1.20、1.21 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.4.0/aio/deploy/recommended.yaml | 
参考链接
- https://github.com/kubernetes/dashboard/blob/master/docs/user/accessing-dashboard/README.md
 - https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/README.md
 - https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md
 - 已上参考连接列举的都是最新版,请结合自身的版本选择对应的标签
 - 国内 GitCode 镜像仓库:https://gitcode.net/mirrors/kubernetes/dashboard
 
安装
- 在管理节点上执行
 
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
 
- 查看是否创建完成
 
# kubernetes(k8s)Dashboard 的命名空间是 kubernetes-dashboard
kubectl get pods -n kubernetes-dashboard -o wide
 
[root@centos-7-9-14 ~]# kubectl get pods -n kubernetes-dashboard -o wide
NAME                                         READY   STATUS    RESTARTS   AGE   IP               NODE            NOMINATED NODE   READINESS GATES
dashboard-metrics-scraper-64bcc67c9c-w6z9g   1/1     Running   0          28m   172.16.191.252   centos-7-9-14   <none>           <none>
kubernetes-dashboard-5c8bd6b59-wh4vq         1/1     Running   0          28m   172.16.191.251   centos-7-9-14   <none>           <none>
[root@centos-7-9-14 ~]# 
 
kubectl -n kubernetes-dashboard get service kubernetes-dashboard
 
[root@centos-7-9-14 ~]# kubectl -n kubernetes-dashboard get service kubernetes-dashboard
NAME                   TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)   AGE
kubernetes-dashboard   ClusterIP   10.108.225.163   <none>        443/TCP   49m
[root@centos-7-9-14 ~]#
 
- 修改 kubernetes-dashboard 服务,使其支持远程访问
 
# https://github.com/kubernetes/dashboard/blob/master/docs/user/accessing-dashboard/README.md
kubectl -n kubernetes-dashboard edit service kubernetes-dashboard
 
将 type: ClusterIP 修改成 type: NodePort 即可
- 修改完成后,再次查看 kubernetes-dashboard 服务
 
kubectl -n kubernetes-dashboard get service kubernetes-dashboard
 
[root@centos-7-9-14 ~]# kubectl -n kubernetes-dashboard get service kubernetes-dashboard
NAME                   TYPE       CLUSTER-IP       EXTERNAL-IP   PORT(S)         AGE
kubernetes-dashboard   NodePort   10.108.225.163   <none>        443:30320/TCP   54m
[root@centos-7-9-14 ~]#
 
- 由上一步执行的结果可以得出,使用 30320 即可访问 kubernetes-dashboard 服务
假如集群的IP为 192.168.80.14,访问地址为 https://192.168.80.14:30320 - 创建服务帐户
 
vim dashboard-adminuser.yaml
 
apiVersion: v1
kind: ServiceAccount
metadata:name: admin-usernamespace: kubernetes-dashboard
 
kubectl apply -f dashboard-adminuser.yaml
 
- 创建群集角色绑定
 
vim cluster-admin.yaml
 
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: admin-user
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: cluster-admin
subjects:
- kind: ServiceAccountname: admin-usernamespace: kubernetes-dashboard
 
kubectl apply -f cluster-admin.yaml
 
- 获取持有者令牌
 
# 指定有效期:--duration=315360000s
# 315360000s 代表 10年
kubectl -n kubernetes-dashboard create token admin-user
 
- 使用上述令牌即可登录系统
 - 其他命令
 
kubectl -n kubernetes-dashboard delete serviceaccount admin-user
 
kubectl -n kubernetes-dashboard delete clusterrolebinding admin-user
