Kubernetes之配置dashboard

小鱼儿 2022-01-16 11:43 281阅读 0赞

### 创建证书 ###

> 由于自动生成的证书 chrome 不允许访问，所以使用自己生成的证书。

[root@master-1 ~]# mkdir certs
    [root@master-1 ~]# (umask 077;openssl genrsa -out dashboard.key 2048)
    [root@master-1 ~]# openssl req -nodes -newkey rsa:2048 -keyout certs/dashboard.key -out certs/dashboard.csr -subj "/C=/ST=/L=/O=/OU=/CN=kubernetes-dashboard"
    [root@master-1 ~]# openssl x509 -req -sha256 -days 365 -in certs/dashboard.csr -signkey certs/dashboard.key -out certs/dashboard.crt
    [root@master-1 ~]# kubectl create secret generic kubernetes-dashboard-certs --from-file=./dashboard.crt --from-file=dashboard.key=./dashboard.key -n kube-system

### 创建 Kubernetes dashboard ###

[root@master-1 ~]# curl -sSLO https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml
    [root@master-1 ~]# kubectl apply -f kubernetes-dashboard.yaml
    [root@master-1 ~]# kubectl -n kube-system expose deployment kubernetes-dashboard  --name kubernetes-dashboard-nodeport --type=NodePort

### 创建 admin 账户 ###

[root@master-1 ~]# cat <<EOF> dashboard-admin.yaml
    ---
    apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: admin-user
      namespace: kube-system
    ---
    apiVersion: rbac.authorization.k8s.io/v1beta1
    kind: ClusterRoleBinding
    metadata:
      name: admin-user
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: ClusterRole
      name: cluster-admin
    subjects:
    - kind: ServiceAccount
      name: admin-user
      namespace: kube-system
    EOF
    
    [root@master-1 ~]# kubectl create -f dashboard-admin.yaml

> 获取 token ，通过 https 进行 dashboard 端口访问

[root@master-1 ~]# kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')

![Kubernetes之配置dashboard][Kubernetes_dashboard]

转载于:https://blog.51cto.com/2032872/2354505

[Kubernetes_dashboard]: https://s1.51cto.com/images/blog/201902/25/897995f7a8eee0280dd906024c7dd082.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=