recommended/kubernetes-dashboard.yaml 控制台文件修改更改如下 kind: Service apiVersion: v1 metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kube-system spec: ports: - port: 443 targetPort: 8443 nodePort : 31234 selector: k8s-app: kubernetes-dashboard type: NodePort 创建admin用户token kind: ClusterRoleBinding
TKE部署kubernetes-dashboard具体参考基于已经创建好的Kubernetes集群进行部署Kubernetes-dashboard下载部署yaml文件wget https://raw.githubusercontent.com name: kubernetes-dashboard namespace: kubernetes-dashboardspec: ports: - port: 443 targetPort : 8443 selector: k8s-app: kubernetes-dashboard type: NodePort #添加这个 service类型 如果需要是CLB类型 则修改成 :dashboard-serviceaccount获取token[root@VM-249-41-tlinux ~]# kubectl get secret -n kubernetes-dashboard 首先需要开启 Sidecar 自动注入配置,命名空间选择kubernetes-dashboard,然后销毁重建kubernetes-dashboard的POD#这边是基于TKE的容器服务网格1.12.5
我们成功配置安装了kubernetes-dashboard插件,但是这里似乎来了另外一个问题:我们怎样进入到dashboard? 如上图,kubernetes-dashboard提供了两种验证方式:kubeconfig、token。这两种验证方式都是怎么回事呢?诶,好像有一个skip,我们点击看看。 name: kubernetes-dashboard namespace: kube-system --- # ------------------- Dashboard Role & Role 这样kubernetes-dashboard就有了kubernetes-dashboard-minimal所定义的权限了。 有一点需要注意:这里的kubernetes-dashboard这个ServiceAccount是当用户直接点击skip进入到dashboard时所使用的账户。
2、修改recommended.yaml默认创建名为 "kubernetes-dashboard“ 的service 是ClusterIP 类型,我们要通过外网访问的话需要修改下,这里我们修改为 NodePort 37 name: kubernetes-dashboard 38 namespace: kubernetes-dashboard 39 spec: 40 type: NodePort createdserviceaccount/kubernetes-dashboard createdservice/kubernetes-dashboard createdsecret/kubernetes-dashboard-certs /kubernetes-dashboard createdclusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard createddeployment.apps :30443/访问到如下页面说明成功了图片6、创建访问账号默认创建的serviceaccount/kubernetes-dashboard 不是所有权限,所以我们要创建一个所有权限的账号。
kubernetes 安装 kubernetes-dashboard 7.x介绍Kubernetes仪表板是Kubernetes集群的通用、基于Web的UI。 安装# 添加源信息helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/# 默认参数安装helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace 我的集群使用默认参数安装 kubernetes-dashboard-kong 出现异常 8444 端口占用# 使用下面的命令进行安装,在安装时关闭kong.tls功能helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --namespace kube-system --set kong.admin.tls.enabled=false
kubernetes-dashboard.zip $ kubectl create -f kubernetes-dashboard-LoadBalancer.yaml serviceaccount "kubernetes-dashboard created rolebinding.rbac.authorization.k8s.io "kubernetes-dashboard-minimal" created deployment.apps "kubernetes-dashboard " created service "kubernetes-dashboard" created 这里的yaml文件应用的是官方的,只做了images、service、Secret(注释,前面先创建了所以这里注释 hub.tencentyun.com/malingxin/kubernetes-dashboard-amd64:v1.10.0 $ kubectl get -n kube-system pod -l k8s-app=kubernetes-dashboard NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE kubernetes-dashboard
metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard kubernetes-dashboard name: kubernetes-dashboard-certs namespace: kubernetes-dashboard type: Opaque rbac.authorization.k8s.io/v1 metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard kind: Role name: kubernetes-dashboard subjects: - kind: ServiceAccount name: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard spec: replicas: 1 revisionHistoryLimit
kubernetes-dashboard.yaml 开启authentication-mode=basic配置 args: – –auto-generate-certificates – –namespace=kubernetes-dashboard – –token-ttl=43200 – –authentication-mode=basic 更新kubernetes-dashboard kubectl apply -f kubernetes-dashboard.yaml
master/src/deploy/recommended/kubernetes-dashboard.yaml 修改nodePort kubectl patch svc -n kube-system kubernetes-dashboard
/monitoring/new/kube-dashboard-v2.0.yaml 启动 kubectl proxy 显示:Starting to serve on 127.0.0.1:8001 访问kubernetes-dashboard 完整地址如下: http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard default:dashboard 使用手动生成自定义证书 上面的安装是使用自动生成证书的办法,下面使用自定义证书: 手动创建证书(目的是加载自定义证书) kubectl create namespace kubernetes-dashboard kubectl create secret generic kubernetes-dashboard-certs --from-file=/root/certs/new-for-dashboard -n kubernetes-dashboard
在https://mp.weixin.qq.com/s/0kOa1SXsUKoaYuCvlsli-w 中介绍了如何在mac(m1 也可以)上搭建docker for mac,下面我们学习下如何安装kubernetes-dashboard created serviceaccount/kubernetes-dashboard created service/kubernetes-dashboard created secret/kubernetes-dashboard-certs created clusterrole.rbac.authorization.k8s.io/kubernetes-dashboard created rolebinding.rbac.authorization.k8s.io /kubernetes-dashboard created clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created deployment.apps/kubernetes-dashboard created service/dashboard-metrics-scraper created deployment.apps
k8s集群之kubernetes-dashboard和kube-dns组件部署安装 说明 最好先部署kube-dns,有些组合服务直接主机用hostname解析,例如redis主从,heapster监控组件 .51cto.com/3002256/1898243 k8s集群RC、SVC、POD部署 http://jerrymin.blog.51cto.com/3002256/1900260 k8s集群组件kubernetes-dashboard " created service "kubernetes-dashboard" created [root@k8s-master kubernetes]# kubectl get service -- namespace=kube-system NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE kubernetes-dashboard 1 1 2h kube-dns-autoscaler 1 1 1 1 16m kubernetes-dashboard
created serviceaccount/kubernetes-dashboard created service/kubernetes-dashboard created secret/kubernetes-dashboard-certs /kubernetes-dashboard created clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created 暴露外网端口 命令:kubectl get svc -A | grep kubernetes-dashboard [root@VM-4-8-centos ~]# kubectl get svc -A | grep kubernetes-dashboard kube-system kubernetes-dashboard NodePort 10.96.105.127 10.96.120.46 <none> 8000/TCP 59m kubernetes-dashboard kubernetes-dashboard
kind: Service apiVersion: v1 metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard : v1 kind: ServiceAccount metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard : kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard spec: ports: k8s-app: kubernetes-dashboard name: kubernetes-dashboard-csrf namespace: kubernetes-dashboard : labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard
metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard : kubernetes-dashboard name: kubernetes-dashboard-csrf namespace: kubernetes-dashboard type: Opaque : labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard kind: Role name: kubernetes-dashboard subjects: - kind: ServiceAccount name: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard spec: replicas: 1 revisionHistoryLimit
metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard kubernetes-dashboard name: kubernetes-dashboard-certs namespace: kubernetes-dashboard type: Opaque kind: Role name: kubernetes-dashboard subjects: - kind: ServiceAccount name: kubernetes-dashboard name: kubernetes-dashboard subjects: - kind: ServiceAccount name: kubernetes-dashboard namespace name: kubernetes-dashboard namespace: kubernetes-dashboard spec: replicas: 1 revisionHistoryLimit
: kubernetes-dashboard namespace: kubernetes-dashboard --- kind: Service apiVersion: v1 metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard k8s-app: kubernetes-dashboard name: kubernetes-dashboard-csrf namespace: kubernetes-dashboard : labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard $ kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep
metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard : kubernetes-dashboard name: kubernetes-dashboard-certs namespace: kubernetes-dashboard type: Opaque : kubernetes-dashboard name: kubernetes-dashboard-settings namespace: kubernetes-dashboard --- name: kubernetes-dashboard namespace: kubernetes-dashboard rules: # Allow Dashboard to get, update kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard spec: replicas:
metadata: labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard : kubernetes-dashboard name: kubernetes-dashboard-certs namespace: kubernetes-dashboard type: Opaque : kubernetes-dashboard name: kubernetes-dashboard-settings namespace: kubernetes-dashboard --- name: kubernetes-dashboard namespace: kubernetes-dashboard rules: # Allow Dashboard to get, update kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard spec: replicas:
kubernetes-dashboard/ --namespace kube-system # NAME: kubernetes-dashboard # LAST DEPLOYED: Sun Dec /component=kubernetes-dashboard,app.kubernetes.io/instance=kubernetes-dashboard,app.kubernetes.io/name app.kubernetes.io/instance: kubernetes-dashboard app.kubernetes.io/name: kubernetes-dashboard $ kubectl edit svc -n kubernetes-dashboard kubernetes-dashboard # service/kubernetes-dashboard edited 名称空间下的资源) kubectl get sa -n kubernetes-dashboard kubernetes-dashboard kubectl describe secrets -n kubernetes-dashboard