当前位置: 首页 > Linux

k8s安装dashboard

时间:2023-04-06 01:49:40 Linux

一、环境介绍k8s版本:v1.22.2dashboard版本:v2.5.1安装前注意k8s版本是否与要安装的dashboard版本兼容。详情参见https://github.com/kubernetes...2。Dashbord安装下载官方yaml文件并部署root@master01:~/dashboard#wgethttps://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yaml--2023-01-0320:51:21--https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yamlResolvingraw.githubusercontent.com(raw.githubusercontent.com)…185.199.108.133,185.199.109.133,185.199.110.133,...连接到raw.githubusercontent.com(raw.githubusercontent.com)|185.199.108.133|:443...已连接。已发送HTTP请求,正在等待响应...200OKLength:7621(7.4K)[text/plain]Savingto:'recommended.yaml'recommended.yaml100%[========================================================================================================>]7.44K---.-KB/s在0.004s2023-01-0320:51:22(1.95MB/s)-'recommended.yaml'已保存[7621/7621]修改其网络为NodePort方式,方便宿主机访问,注意40行和44行位置内容的变化30---3132种类:服务33apiVersion:v134元数据:35标签:36k8s-app:kubernetes-dashboard37名称:kubernetes-dashboard38命名空间:kubernetes-dashboard39规格:40类型:NodePort41端口:42-port:44343targetPort:844344nodePort:3000145selector:46k8s-app:kubernetes-dashboard4748---部分dashboardroot@master01:~/dashboard#kubectlapply-frecommended.yamlnamespace/kubernetes-dashboardcreatedserviceaccount/kubernetes-dashboardcreatedservice/kubernetes-dashboardcreatedsecret/kubernetes-dashboard-certscreatedsecret/kubernetes-dashboard-csrfcreatedsecret/kubernetes-dashboard-key-holdercreatedconfigmap/kubernetes-dashboard-settingscreatedrole.rbac.authorization.k8s.io/kubernetes-dashboardcreatedclusterrole.rbac.authorization.k8s.io/kubernetes-dashboardcreatedrolebinding.rbac.authorization.k8s.io/kubernetes-dashboardcreatedclusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboardcreateddeployment.apps/kubernetes-dashboardcreatedservice/dashboard-metrics-scrapercreateddeployment.apps/dashboard-metrics-scrapercreated查看dashbaord相关pod状态root@master01:~/dashboard#kubectlgetpo-nkubernetes-dashboardNAMEREADYSTATUSRESTARTSAGEEdashboard-metrics-scraper-c45b7869d-rh4p71/1Running04m2skubernetes-dashboard-79b5779bf4-bvbsf1/1Running04m2s在宿主机上使用浏览器成功访问dashboard并将kubernetes-dashboard绑定到cluster-admin根权限@master01:~/dashboard#kubectlcreateclusterrolebindingdashboard-cluster-admin--clusterrole=cluster-admin--serviceaccount=kubernetes-dashboard:kubernetes-dashboardclusterrolebinding.rbac.authorization.k8s.io/dashboard-cluster-admincreatedfromdefault在创建的secret中找到相关的token值,粘贴到浏览器的相应位置。注意,更新kubernetesv1.24.0后创建ServiceAccount并不会自动生成Secret。它需要手动创建。本文使用的版本是1.22版本,所以Secret会自动生成。具体说明请查看:https://cloud.tencent.com/dev...root@master01:~/dashboard#kubectlgetsecrets-nkubernetes-dashboardNAMETYPEDATAAGEdefault-token-625rdkubernetes.io/service-account-token311mkubernetes-dashboard-certs不透明011mkubernetes-dashboard-csrf不透明111mkubernetes-dashboard-key-holder不透明211mkubernetes-dashboard-token-ffsvdkubernetes.io/service-account-token311mroot@master01:~/dashboard#kubectldescribesecretskubernetes-dashboard-token-ffsvd-nkubernetes-dashboard名称:kubernetes-dashboard-token-ffsvd命名空间:kubernetes-dashboardLabels:注解:kubernetes.io/service-account.name:kubernetes-dashboardkubernetes.io/service-account.uid:7cd8d6da-b722-4791-b432-b4459d1931c2Type:kubernetes.io/service-account-tokenData====ca.crt:1350bytesnamespace:20bytestoken:eyJhbGciOiJSUzI1NiIsImtpZCI6InpjRXhWTDd6MmlPRmoyS0FEbDVIWFFZb29SaWlkRjlORVNnYm9GUEdKSmMifQ.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.fXJcuj5pwsAf-9_OPY2FXV7Lo5wqcfT-JkqFpIW1SwS0JtTR1ndbjNhZX0Wo5d4ds2ZCSMHnf1V0sII3mzRIF8iYPKiRxRgowEDhPFTW3gOqMaeirmpdAuMT4UcaV6HibH0wIipE74RYiPLMdTC7Y5Mu1sFQO8gKNAHWj3k9mPblVYK9IUYvFiVIJm5UNBVQpvxZYyrjld7v9UCi0RWyHcnNA8DCY6nlbPbyUp7gYwfEGUPeJo_4ewQ4AFktiuTA6lbSWqL1AB8WOzIcEfjCqZaRUbnPKt6HZGNNglCSiRTyHz2maGeH9mqk7cF7vxVQ3uzewGPvOnEOg1SSbkGhUA在浏览器登录后效果,注意右下角显示的POD的CPU及内存使用监控需要安装metric-server才可以正常显示,否则会显示空白ps:本文操作已在本人环境中操作成功,如有问题亦Orwheretheexpressionisunclear,welcometocorrectme.