k8s(kubernetes) 部署dashboard可视化界面及相关操作

admin

k8s(kubernetes) 部署dashboard可视化界面及相关操作

% F7 I( d. B' O
0 [: t$ u0 y0 ~8 \: a, [4 g
$ r9 @6 n/ T+ q: w. `4 ckubernetes相关部署详见：https://www.bbs168x.cn/forum.php ... ge=1&extra=#pid5461

#创建danshboard
kubectl create -f recommended.yaml

' c  ]; K) D; M8 e; j5 ^- z[root@kubernetes-master ~]# kubectl create -f recommended.yaml
namespace/kubernetes-dashboard created
( a" f, |, U8 O$ V9 _serviceaccount/kubernetes-dashboard created
service/kubernetes-dashboard created
' A7 O# f! n6 q  I9 ?3 Qsecret/kubernetes-dashboard-certs created
secret/kubernetes-dashboard-csrf created
( M9 ^' _0 Y1 n0 z+ z  o0 \6 U; fsecret/kubernetes-dashboard-key-holder created
configmap/kubernetes-dashboard-settings created
. @+ ?7 b  R# A2 @3 [2 xrole.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrole.rbac.authorization.k8s.io/kubernetes-dashboard created
+ `9 z( f) F% f; |* ~rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
- j3 M6 s: ~8 Bclusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
$ l8 ?( a  N0 L/ Y* I, v$ a5 g$ @deployment.apps/kubernetes-dashboard created
$ [; s; u; ?1 _& T! zservice/dashboard-metrics-scraper created
* W/ K& ]2 G6 Tdeployment.apps/dashboard-metrics-scraper created



  T2 ^: G% ^4 b3 {" K  G# ~* W  Rdashboard安装后
查看pod的状态确保dashboard已经部署成功
7 z6 z- p- F+ c3 d. ~% c

[root@kubernetes-master ~]# kubectl get pod -n kubernetes-dashboard
NAME                                         READY   STATUS    RESTARTS   AGE
! ]1 y, P: ^9 [. Odashboard-metrics-scraper-5657497c4c-vf2hz   1/1     Running   0          18h
. Z, g8 S8 k* P; s7 L3 A0 p/ \# g* P* akubernetes-dashboard-78f87ddfc-b65kc         1/1     Running   0          18h
; f5 s; H& f1 L: T: E

访问dashboard

1）查看service，访问端口为32333

, t3 m" ?( {& p[root@kubernetes-master ~]# kubectl get service -n kubernetes-dashboard
NAME                        TYPE        CLUSTER-IP        EXTERNAL-IP   PORT(S)         AGE
1 q  _* `9 E1 T' D, ~dashboard-metrics-scraper   ClusterIP   100.184.128.141   <none>        8000/TCP        18h
; S, Q" E( [: M8 g. Wkubernetes-dashboard        NodePort    100.186.249.64    <none>        443:32333/TCP   18h


3 N; H$ V% M) @8 o2）浏览器输入https://masterIP:端口号访问即可；我的是https://172.24.110.182:32333，然后选择token登录
% C0 z! j& P, c5 d4 e+ |

                               
登录/注册后可看大图

[url=]kubernetes-dashboard.jpg[/url]
9 W+ M1 q3 V9 c  L$ e6 p

% [- C+ y2 a: t: }3 g) c% R7 `$ X3)编写 dashboard-adminuser.yaml文件并应用

% h  o& X5 l* T% m% ecat> dashboard-adminuser.yaml <<EOF
apiVersion: v1
kind: ServiceAccount
metadata:
$ M! q4 s3 ~0 S    name: admin-user
    namespace: kube-system
- j: j7 V; K8 t---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
$ W/ n7 x" ^% D; x; xmetadata:
* s% s# J$ u6 D    name: admin-user
5 e1 X5 U1 O$ L" hroleRef:
+ k7 m6 U7 b' z, Q    apiGroup: rbac.authorization.k8s.io
. k8 |1 C& G* l, Z4 ]0 M    kind: ClusterRole
; y. c1 q7 V6 B    name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
; ^1 A2 c$ ^( Y. _, E6 U# u& \  namespace: kube-system
EOF

/ U4 B3 x/ C0 D$ S5 |  I


[root@kubernetes-master ~]# kubectl apply -f dashboard-adminuser.yaml
serviceaccount/admin-user created
6 g$ j) O3 H1 Y& \clusterrolebinding.rbac.authorization.k8s.io/admin-user created

# v0 f+ R& S  g, x7 `; Q

4)获取token并登录


" M- s  `8 k; k# N' ~) }3 H6 Q[root@kubernetes-master ~]# kubectl create token admin-user --namespace kube-system
. `0 Y: M6 I% r' \eyJhbGciOiJSUzI1NiIsImtpZCI6IktWTDdRU29nYkJ6R2dFMU1SeDRJOGhWUjlSdE9VZE5Eck9CNkk0cThVUlkifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjLmNsdXN0ZXIubG9jYWwiXSwiZXhwIjoxNzI2NzE5MTcxLCJpYXQiOjE3MjY3MTU1NzEsImlzcyI6Imh0dHBzOi8va3ViZXJuZXRlcy5kZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsIiwia3ViZXJuZXRlcy5pbyI6eyJuYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsInNlcnZpY2VhY2NvdW50Ijp7Im5hbWUiOiJhZG1pbi11c2VyIiwidWlkIjoiNzJiOGY3ODMtZjY1MC00MTBjLTk1YTktN2MxYTIyZjRlYjkzIn19LCJuYmYiOjE3MjY3MTU1NzEsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDprdWJlLXN5c3RlbTphZG1pbi11c2VyIn0.DkFFYdUTzbBUhn6uNbIKpuf9CLnU1CKBSUoLiTssg8uyHgmgk6Z_G_elfOIdVHwP8xlnF7ZmAOCzBC6Mgr9keNoXOm5ttZ3wLXIoo_9LKYn3i_UrR6ucj4N2mxiQWpxqjrmpHcKsmPnmKdvzaW653opkP2s2VPcGHU73XSZ9eRit82hUnEQcxdWGsA0shkbTV_ICUzbMVs4vUNbPVENnRYivkYAzKBwakoPTK3mYiQQKdrWiqRbd9e-ag3t9MtGL2oU8hzzXoyvuqAUbGtzRandOjb3_t8v6e5ftt460oW_LM86uJVZ0OU-GbqlvoJSa1dJfrQBD2rkDkOOise-FFA
[root@kubernetes-master ~]#


& u( o4 V% E3 O6 ?输入token到浏览器中，点击登录即可：
[url=]微信图片_20240919111611.p ...[/url]
0 w/ \* ?5 w8 C) `* L% s$ s

admin

[root@k8s-master ~]# kubeadm config print init-defaults
apiVersion: kubeadm.k8s.io/v1beta4
# k1 c( Z( c9 W* s. \bootstrapTokens:
" K1 n$ U" \) p8 A# k! k- groups:
  - system:bootstrappers:kubeadm:default-node-token
0 w# E5 p* [" u  token: abcdef.0123456789abcdef
  ttl: 24h0m0s
$ K; S9 T  T' J5 f* G  usages:
  - signing
+ l' E3 a* Q/ \  - authentication
" f1 w  @5 c# P9 H- ?2 Akind: InitConfiguration
localAPIEndpoint:
  advertiseAddress: 1.2.3.4
7 d6 u% |) \  m9 O9 }! x* _+ I  bindPort: 6443
) W- X+ O' D! SnodeRegistration:
  criSocket: unix:///var/run/containerd/containerd.sock
# V( {* v- ?! y# u  imagePullPolicy: IfNotPresent
  imagePullSerial: true
3 v1 r, G* x9 G  B3 n  name: node
  taints: null
+ ]# J' @; t/ ~timeouts:
  controlPlaneComponentHealthCheck: 4m0s
6 r' ~# S4 o) E& z! P% ^  discovery: 5m0s
' Y7 M8 n. }8 v1 ]( K& A1 k  etcdAPICall: 2m0s
, b! l& U$ l. k  kubeletHealthCheck: 4m0s
  kubernetesAPICall: 1m0s
* e5 ^! p( K2 r, I1 p- c  tlsBootstrap: 5m0s
3 ~: s0 `5 y. I0 e) ~2 R  upgradeManifests: 5m0s
* X0 Z9 J2 O# c4 H$ Z---
apiServer: {}
$ d9 x0 F$ X8 [& S" uapiVersion: kubeadm.k8s.io/v1beta4
caCertificateValidityPeriod: 87600h0m0s
certificateValidityPeriod: 8760h0m0s
certificatesDir: /etc/kubernetes/pki
clusterName: kubernetes
( q/ n/ P9 {" p6 B* Z+ W9 \controllerManager: {}
dns: {}
encryptionAlgorithm: RSA-2048
8 ]; O/ G9 p  w( T: N1 detcd:
2 l9 `" ]5 B8 U6 o2 W3 a, J  o  local:
; M( [$ h, E/ Y5 m& s" d( ]6 v( s    dataDir: /var/lib/etcd
imageRepository: registry.k8s.io
# C( O3 {1 Q; N( `9 a& b" a7 V6 J1 A* tkind: ClusterConfiguration
6 V/ Q7 ^, O/ u, _+ c5 e* k  pkubernetesVersion: 1.31.0
networking:
9 N' M  o" c5 C; H2 j- w  dnsDomain: cluster.local
  serviceSubnet: 10.96.0.0/12
proxy: {}
scheduler: {}