一、环境介绍
k8s版本:v1.22.2
dashboard版本:v2.5.1
装置前留神k8s的版本与将要装置的dashbaord版本是否兼容,具体查看https://github.com/kubernetes...
二、dashbord装置
下载官网yaml文件并且进行部署
root@master01:~/dashboard# wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yaml--2023-01-03 20:51:21-- https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yamlResolving raw.githubusercontent.com (raw.githubusercontent.com)... 185.199.108.133, 185.199.109.133, 185.199.110.133, ...Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|185.199.108.133|:443... connected.HTTP request sent, awaiting response... 200 OKLength: 7621 (7.4K) [text/plain]Saving to: ‘recommended.yaml’recommended.yaml 100%[=================================================================================================>] 7.44K --.-KB/s in 0.004s 2023-01-03 20:51:22 (1.95 MB/s) - ‘recommended.yaml’ saved [7621/7621]批改其网络为NodePort模式,不便宿主机进行拜访,留神其40行与44行地位内容的变更。 30 --- 31 32 kind: Service 33 apiVersion: v1 34 metadata: 35 labels: 36 k8s-app: kubernetes-dashboard 37 name: kubernetes-dashboard 38 namespace: kubernetes-dashboard 39 spec: 40 type: NodePort 41 ports: 42 - port: 443 43 targetPort: 8443 44 nodePort: 30001 45 selector: 46 k8s-app: kubernetes-dashboard 47 48 ---部署dashboardroot@master01:~/dashboard# kubectl apply -f recommended.yaml namespace/kubernetes-dashboard createdserviceaccount/kubernetes-dashboard createdservice/kubernetes-dashboard createdsecret/kubernetes-dashboard-certs createdsecret/kubernetes-dashboard-csrf createdsecret/kubernetes-dashboard-key-holder createdconfigmap/kubernetes-dashboard-settings createdrole.rbac.authorization.k8s.io/kubernetes-dashboard createdclusterrole.rbac.authorization.k8s.io/kubernetes-dashboard createdrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard createdclusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard createddeployment.apps/kubernetes-dashboard createdservice/dashboard-metrics-scraper createddeployment.apps/dashboard-metrics-scraper created
查看dashbaord相干pod状态
root@master01:~/dashboard# kubectl get po -n kubernetes-dashboard NAME READY STATUS RESTARTS AGEdashboard-metrics-scraper-c45b7869d-rh4p7 1/1 Running 0 4m2skubernetes-dashboard-79b5779bf4-bvbsf 1/1 Running 0 4m2s
在宿主机应用浏览器胜利拜访到dashboard
将kubernetes-dashboard绑定cluster-admin权限。
root@master01:~/dashboard# kubectl create clusterrolebinding dashboard-cluster-admin --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:kubernetes-dashboardclusterrolebinding.rbac.authorization.k8s.io/dashboard-cluster-admin created
从默认创立的secret中找到相干的tocken值粘贴到浏览器对应地位,留神kubernetes v1.24.0 更新之后进行创立 ServiceAccount 不会主动生成 Secret 须要对其手动创立本文应用的版本为1.22版本,所以会主动生成Secret。具体阐明请查看:https://cloud.tencent.com/dev...
root@master01:~/dashboard# kubectl get secrets -n kubernetes-dashboard NAME TYPE DATA AGEdefault-token-625rd kubernetes.io/service-account-token 3 11mkubernetes-dashboard-certs Opaque 0 11mkubernetes-dashboard-csrf Opaque 1 11mkubernetes-dashboard-key-holder Opaque 2 11mkubernetes-dashboard-token-ffsvd kubernetes.io/service-account-token 3 11mroot@master01:~/dashboard# kubectl describe secrets kubernetes-dashboard-token-ffsvd -n kubernetes-dashboard Name: kubernetes-dashboard-token-ffsvdNamespace: kubernetes-dashboardLabels: <none>Annotations: kubernetes.io/service-account.name: kubernetes-dashboard kubernetes.io/service-account.uid: 7cd8d6da-b722-4791-b432-b4459d1931c2Type: kubernetes.io/service-account-tokenData====ca.crt: 1350 bytesnamespace: 20 bytestoken: eyJhbGciOiJSUzI1NiIsImtpZCI6InpjRXhWTDd6MmlPRmoyS0FEbDVIWFFZb29SaWlkRjlORVNnYm9GUEdKSmMifQ.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.fXJcuj5pwsAf-9_OPY2FXV7Lo5wqcfT-JkqFpIW1SwS0JtTR1ndbjNhZX0Wo5d4ds2ZCSMHnf1V0sII3mzRIF8iYPKiRxRgowEDhPFTW3gOqMaeirmpdAuMT4UcaV6HibH0wIipE74RYiPLMdTC7Y5Mu1sFQO8gKNAHWj3k9mPblVYK9IUYvFiVIJm5UNBVQpvxZYyrjld7v9UCi0RWyHcnNA8DCY6nlbPbyUp7gYwfEGUPeJo_4ewQ4AFktiuTA6lbSWqL1AB8WOzIcEfjCqZaRUbnPKt6HZGNNglCSiRTyHz2maGeH9mqk7cF7vxVQ3uzewGPvOnEOg1SSbkGhUA
在浏览器登录后成果,留神左下角显示的CPU及内存应用监控须要装置metric-server才能够失常显示,否则会显示空白。
ps:本文操作已在自己环境中操作胜利,如有问题亦或表述不清的中央欢送斧正。