k8s(kubernetes) 部署dashboard可视化界面及相关操作

admin

k8s(kubernetes) 部署dashboard可视化界面及相关操作

. h, f6 c  X6 y

kubernetes相关部署详见：https://www.bbs168x.cn/forum.php ... ge=1&extra=#pid5461
) B" [$ z9 a6 H2 d" o) Z
, y3 A, l3 ^7 j#创建danshboard
kubectl create -f recommended.yaml

/ I" H' B+ E5 W* N, d2 q[root@kubernetes-master ~]# kubectl create -f recommended.yaml
( E5 N; @$ j, K% [3 a: ]' U1 ~namespace/kubernetes-dashboard created
. I0 v, ^* d2 L7 n$ Aserviceaccount/kubernetes-dashboard created
service/kubernetes-dashboard created
; r5 a9 @$ c) D8 q7 f0 Nsecret/kubernetes-dashboard-certs created
7 a( h+ P2 k- @1 _secret/kubernetes-dashboard-csrf created
secret/kubernetes-dashboard-key-holder created
configmap/kubernetes-dashboard-settings created
role.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrole.rbac.authorization.k8s.io/kubernetes-dashboard created
# K4 `0 _) C+ f8 x9 b$ O. Arolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
: m8 k& H5 \; I( Mdeployment.apps/kubernetes-dashboard created
service/dashboard-metrics-scraper created
deployment.apps/dashboard-metrics-scraper created

! c0 A% ?$ y, @/ J
) C( @1 _7 z1 i! \6 r
dashboard安装后
查看pod的状态确保dashboard已经部署成功


7 b( I: o4 k) B- u, k2 x4 [[root@kubernetes-master ~]# kubectl get pod -n kubernetes-dashboard
NAME                                         READY   STATUS    RESTARTS   AGE
dashboard-metrics-scraper-5657497c4c-vf2hz   1/1     Running   0          18h
kubernetes-dashboard-78f87ddfc-b65kc         1/1     Running   0          18h
+ D( @+ o- ^; A4 b* g6 s
! L7 P2 {# o5 g+ [: ?: m. E
$ u- v% ^- G' O访问dashboard

1）查看service，访问端口为32333

8 |: b: v3 N' ?: ?* T9 C! p[root@kubernetes-master ~]# kubectl get service -n kubernetes-dashboard
  A0 ?& c# l# n# ?- R, r4 f6 s+ R+ XNAME                        TYPE        CLUSTER-IP        EXTERNAL-IP   PORT(S)         AGE
, ?: ]6 A) i: ]! Fdashboard-metrics-scraper   ClusterIP   100.184.128.141   <none>        8000/TCP        18h
6 \( u. G  [3 t* d! a4 ?kubernetes-dashboard        NodePort    100.186.249.64    <none>        443:32333/TCP   18h
) V- }+ i* a( ^% X
4 W# \) [/ h& O4 c1 H7 s& ~+ F5 C5 q
2）浏览器输入https://masterIP:端口号访问即可；我的是https://172.24.110.182:32333，然后选择token登录
/ d9 M' ]6 u4 e& ^4 E8 ~

7 A7 C! v9 t- F5 A: P                               
登录/注册后可看大图

[url=]kubernetes-dashboard.jpg[/url]
! p) O5 L: a- x2 }* O% q

3)编写 dashboard-adminuser.yaml文件并应用
; Z. Y% `. J8 D6 [0 v+ @8 Q
cat> dashboard-adminuser.yaml <<EOF
$ B" Z2 J( y3 Q8 UapiVersion: v1
* M) g4 N, V0 }, u2 h+ Ykind: ServiceAccount
metadata:
9 X, O  A. j; K; b1 f! v5 ?* i# e. W    name: admin-user
/ l& @( q$ k  y    namespace: kube-system
---
( V8 R8 p8 }: AapiVersion: rbac.authorization.k8s.io/v1
% q2 f0 F0 }7 j8 a' v; i8 \- `kind: ClusterRoleBinding
7 N8 g+ d+ u) X1 ^+ C! ~8 d2 Dmetadata:
    name: admin-user
roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: cluster-admin
subjects:
! j4 ]2 R* ~  }& b- kind: ServiceAccount
  name: admin-user
+ S% ?! L* h" f, [- l; b. @, Z  namespace: kube-system
EOF
# }2 c6 [) r" O0 x6 |& g
1 l4 b  W/ \* L/ \- [9 Q& ]2 g" N, v

, Y/ q9 V: _7 z" Q
[root@kubernetes-master ~]# kubectl apply -f dashboard-adminuser.yaml
serviceaccount/admin-user created
: D* a8 j& E/ D0 T5 t* i2 Dclusterrolebinding.rbac.authorization.k8s.io/admin-user created
+ \" g5 x! L1 n5 y: s* I7 Y
0 R* T* y: @; s2 Z; d) B

" Y; [- ?8 `( @0 d4)获取token并登录


# l: ~! k% b3 o4 ~- j3 [[root@kubernetes-master ~]# kubectl create token admin-user --namespace kube-system
9 ^+ h/ E& y  f4 PeyJhbGciOiJSUzI1NiIsImtpZCI6IktWTDdRU29nYkJ6R2dFMU1SeDRJOGhWUjlSdE9VZE5Eck9CNkk0cThVUlkifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjLmNsdXN0ZXIubG9jYWwiXSwiZXhwIjoxNzI2NzE5MTcxLCJpYXQiOjE3MjY3MTU1NzEsImlzcyI6Imh0dHBzOi8va3ViZXJuZXRlcy5kZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsIiwia3ViZXJuZXRlcy5pbyI6eyJuYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsInNlcnZpY2VhY2NvdW50Ijp7Im5hbWUiOiJhZG1pbi11c2VyIiwidWlkIjoiNzJiOGY3ODMtZjY1MC00MTBjLTk1YTktN2MxYTIyZjRlYjkzIn19LCJuYmYiOjE3MjY3MTU1NzEsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDprdWJlLXN5c3RlbTphZG1pbi11c2VyIn0.DkFFYdUTzbBUhn6uNbIKpuf9CLnU1CKBSUoLiTssg8uyHgmgk6Z_G_elfOIdVHwP8xlnF7ZmAOCzBC6Mgr9keNoXOm5ttZ3wLXIoo_9LKYn3i_UrR6ucj4N2mxiQWpxqjrmpHcKsmPnmKdvzaW653opkP2s2VPcGHU73XSZ9eRit82hUnEQcxdWGsA0shkbTV_ICUzbMVs4vUNbPVENnRYivkYAzKBwakoPTK3mYiQQKdrWiqRbd9e-ag3t9MtGL2oU8hzzXoyvuqAUbGtzRandOjb3_t8v6e5ftt460oW_LM86uJVZ0OU-GbqlvoJSa1dJfrQBD2rkDkOOise-FFA
! [( N0 ~; B  f$ i1 v* l  E1 I2 _1 ~! n; |[root@kubernetes-master ~]#
  M" P; c* ^" f- a$ g
' g+ E+ a* b7 C- f" S7 y
* D. I- i1 m! z输入token到浏览器中，点击登录即可：
" r+ g2 }; A; _  \- f9 ^3 G[url=]微信图片_20240919111611.p ...[/url]
9 V6 F8 n3 |% n+ i& ^* B! e4 @$ l

admin

[root@k8s-master ~]# kubeadm config print init-defaults
; D8 b0 _" P( t) napiVersion: kubeadm.k8s.io/v1beta4
. g  D0 i$ }1 b# z  n) m/ Y* kbootstrapTokens:
- groups:
! l" \  g7 {0 F  - system:bootstrappers:kubeadm:default-node-token
  token: abcdef.0123456789abcdef
  ttl: 24h0m0s
  usages:
4 ], d: o/ l% v2 B+ S( L  - signing
  - authentication
% ^/ I% b! E2 i& p( h1 ykind: InitConfiguration
* H# W; b6 E5 l0 A" n& MlocalAPIEndpoint:
2 [3 R" ^. U" Z# \7 X  advertiseAddress: 1.2.3.4
  bindPort: 6443
nodeRegistration:
7 h& b6 ?# \$ J; A, i6 i, P  criSocket: unix:///var/run/containerd/containerd.sock
  imagePullPolicy: IfNotPresent
  imagePullSerial: true
. x/ l9 E; Z6 t2 I4 Z  name: node
' |2 o& K$ j2 E3 k  O  taints: null
timeouts:
  controlPlaneComponentHealthCheck: 4m0s
; ?" i% F. D' R9 m- g6 F7 W  discovery: 5m0s
  etcdAPICall: 2m0s
1 z! M- Z4 T& x; V! e  kubeletHealthCheck: 4m0s
  kubernetesAPICall: 1m0s
. s+ P- j+ x' d& O1 U) N  tlsBootstrap: 5m0s
  upgradeManifests: 5m0s
# t  ?/ T; a' P6 m' w# l---
apiServer: {}
$ t  _0 I+ q1 @' l8 Y( o2 i* HapiVersion: kubeadm.k8s.io/v1beta4
caCertificateValidityPeriod: 87600h0m0s
$ J8 e  n2 @* l8 b3 f( W; i# V6 EcertificateValidityPeriod: 8760h0m0s
* J8 W9 z) ^; f! O3 \% V2 h/ Q, OcertificatesDir: /etc/kubernetes/pki
% b- n9 Z  _% e9 V: T/ ]clusterName: kubernetes
) b9 n+ l' t1 Y& }9 G+ y$ h. \controllerManager: {}
dns: {}
encryptionAlgorithm: RSA-2048
etcd:
  local:
6 d7 F* l$ w# ]. C  @    dataDir: /var/lib/etcd
imageRepository: registry.k8s.io
0 @2 H2 `+ E: e( q; zkind: ClusterConfiguration
, p! p) |+ y5 p1 B! r, PkubernetesVersion: 1.31.0
3 A! g5 T8 G% k1 ~networking:
4 x9 D3 Q7 S; Q" P! O. a" l4 H  dnsDomain: cluster.local
  serviceSubnet: 10.96.0.0/12
proxy: {}
+ S7 {$ }1 m2 e* dscheduler: {}