7、kubernetes（k8s）Dashboard 安装
本文内容以语雀为准
说明
Kubernetes Dashboard 是一个通用的、基于Web的UI，用于Kubernetes集群管理。
它允许用户管理群集中运行的应用程序并对其进行故障排除，以及管理群集本身。
不同 Kubernetes Dashboard 支持的 Kubernetes 版本不同，可查看 Kubernetes Dashboard 发版日志中的说明：https://github.com/kubernetes/dashboard/releases ，下面列举最近几版的版本支持（仅列举了 完全支持的版本范围）
国内GitCode镜像仓库：https://gitcode.net/mirrors/kubernetes/dashboard
使用网址如：https://gitcode.net/mirrors/kubernetes/dashboard/-/raw/v2.7.0/aio/deploy/recommended.yaml ，只需要换一下标签名
| Kubernetes Dashboard 版本 | Kubernetes 版本 | |
|---|---|---|
| 2.7.0 | 1.25 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml |
| 2.6.1 | 1.24 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.6.1/aio/deploy/recommended.yaml |
| 2.6.0 | 1.24 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.6.0/aio/deploy/recommended.yaml |
| 2.5.1 | 1.23 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yaml |
| 2.5.0 | 1.23 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.0/aio/deploy/recommended.yaml |
| 2.4.0 | 1.20、1.21 | kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.4.0/aio/deploy/recommended.yaml |
参考链接
- https://github.com/kubernetes/dashboard/blob/master/docs/user/accessing-dashboard/README.md
- https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/README.md
- https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md
- 已上参考连接列举的都是最新版，请结合自身的版本选择对应的标签
- 国内 GitCode 镜像仓库：https://gitcode.net/mirrors/kubernetes/dashboard
安装
- 在管理节点上执行
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
- 查看是否创建完成
# kubernetes（k8s）Dashboard 的命名空间是 kubernetes-dashboard
kubectl get pods -n kubernetes-dashboard -o wide
[root@centos-7-9-14 ~]# kubectl get pods -n kubernetes-dashboard -o wide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
dashboard-metrics-scraper-64bcc67c9c-w6z9g 1/1 Running 0 28m 172.16.191.252 centos-7-9-14 <none> <none>
kubernetes-dashboard-5c8bd6b59-wh4vq 1/1 Running 0 28m 172.16.191.251 centos-7-9-14 <none> <none>
[root@centos-7-9-14 ~]#
kubectl -n kubernetes-dashboard get service kubernetes-dashboard
[root@centos-7-9-14 ~]# kubectl -n kubernetes-dashboard get service kubernetes-dashboard
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes-dashboard ClusterIP 10.108.225.163 <none> 443/TCP 49m
[root@centos-7-9-14 ~]#
- 修改 kubernetes-dashboard 服务，使其支持远程访问
# https://github.com/kubernetes/dashboard/blob/master/docs/user/accessing-dashboard/README.md
kubectl -n kubernetes-dashboard edit service kubernetes-dashboard
将 type: ClusterIP 修改成 type: NodePort 即可
- 修改完成后，再次查看 kubernetes-dashboard 服务
kubectl -n kubernetes-dashboard get service kubernetes-dashboard
[root@centos-7-9-14 ~]# kubectl -n kubernetes-dashboard get service kubernetes-dashboard
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes-dashboard NodePort 10.108.225.163 <none> 443:30320/TCP 54m
[root@centos-7-9-14 ~]#
- 由上一步执行的结果可以得出，使用 30320 即可访问 kubernetes-dashboard 服务
假如集群的IP为 192.168.80.14，访问地址为 https://192.168.80.14:30320 - 创建服务帐户
vim dashboard-adminuser.yaml
apiVersion: v1
kind: ServiceAccount
metadata:name: admin-usernamespace: kubernetes-dashboard
kubectl apply -f dashboard-adminuser.yaml
- 创建群集角色绑定
vim cluster-admin.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: admin-user
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: cluster-admin
subjects:
- kind: ServiceAccountname: admin-usernamespace: kubernetes-dashboard
kubectl apply -f cluster-admin.yaml
- 获取持有者令牌
# 指定有效期：--duration=315360000s
# 315360000s 代表 10年
kubectl -n kubernetes-dashboard create token admin-user
- 使用上述令牌即可登录系统
- 其他命令
kubectl -n kubernetes-dashboard delete serviceaccount admin-user
kubectl -n kubernetes-dashboard delete clusterrolebinding admin-user