【K8S】K8S 1

kube-system etcd-binghe101 1/1 Running 2 15h 192.168.175.101 binghe101

kube-system kube-apiserver-binghe101 1/1 Running 3 15h 192.168.175.101 binghe101

kube-system kube-controller-manager-binghe101 1/1 Running 3 15h 192.168.175.101 binghe101

kube-system kube-proxy-cgq5n 1/1 Running 2 15h 192.168.175.102 binghe102

kube-system kube-proxy-qnffb 1/1 Running 2 15h 192.168.175.101 binghe101

kube-system kube-scheduler-binghe101 1/1 Running 3 15h 192.168.175.101 binghe101

kube-system metrics-server-57bc7f4584-cwsn8 1/1 Running 0 109m 172.18.229.68 binghe102

2.下载recommended.yaml文件

wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0/aio/deploy/recommended.yaml

3.修改recommended.yaml文件

vim recommended.yaml

需要修改的内容如下所示。

---

kind: Service

apiVersion: v1

metadata:

labels:

k8s-app: kubernetes-dashboard

name: kubernetes-dashboard

namespace: kubernetes-dashboard

spec:

type: NodePort #增加

ports:

• port: 443

targetPort: 8443

nodePort: 30000 #增加

selector:

k8s-app: kubernetes-dashboard

---

#因为自动生成的证书很多浏览器无法使用，所以我们自己创建，注释掉kubernetes-dashboard-certs对象声明

#apiVersion: v1

#kind: Secret

#metadata:

labels:

k8s-app: kubernetes-dashboard

name: kubernetes-dashboard-certs

namespace: kubernetes-dashboard

#type: Opaque

---

4.创建证书

mkdir dashboard-certs

cd dashboard-certs/

#创建命名空间

kubectl create namespace kubernetes-dashboard

创建key文件

openssl genrsa -out dashboard.key 2048

#证书请求

openssl req -days 36000 -new -out dashboard.csr -key dashboard.key -subj ‘/CN=dashboard-cert’

#自签证书

openssl x509 -req -in dashboard.csr -signkey dashboard.key -out dashboard.crt

#创建kubernetes-dashboard-certs对象

kubectl create secret generic kubernetes-dashboard-certs --from-file=dashboard.key --from-file=dashboard.crt -n kubernetes-dashboard

5.安装dashboard

kubectl create -f ~/recommended.yaml

注意：这里可能会报如下所示。

Error from server (AlreadyExists): error when creating “./recommended.yaml”: namespaces “kubernetes-dashboard” already exists

这是因为我们在创建证书时，已经创建了kubernetes-dashboard命名空间，所以，直接忽略此错误信息即可。

6.查看安装结果

[root@binghe101 ~]# kubectl get pods -A -o wide

NAMESPACE NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES

kube-system calico-kube-controllers-5b8b769fcd-l2tmm 1/1 Running 2 15h 172.18.203.71 binghe101

kube-system calico-node-7b7fx 1/1 Running 2 15h 192.168.175.102 binghe102

kube-system calico-node-8krsl 1/1 Running 2 15h 192.168.175.101 binghe101

kube-system coredns-546565776c-rd2zr 1/1 Running 2 15h 172.18.203.72 binghe101

kube-system coredns-546565776c-x8r7l 1/1 Running 2 15h 172.18.203.73 binghe101

kube-system etcd-binghe101 1/1 Running 2 15h 192.168.175.101 binghe101

kube-system kube-apiserver-binghe101 1/1 Running 3 15h 192.168.175.101 binghe101

kube-system kube-controller-manager-binghe101 1/1 Running 3 15h 192.168.175.101 binghe101

kube-system kube-proxy-cgq5n 1/1 Running 2 15h 192.168.175.102 binghe102

kube-system kube-proxy-qnffb 1/1 Running 2 15h 192.168.175.101 binghe101

kube-system kube-scheduler-binghe101 1/1 Running 3 15h 192.168.175.101 binghe101

kube-system metrics-server-57bc7f4584-cwsn8 1/1 Running 0 133m 172.18.229.68 binghe102

kubernetes-dashboard dashboard-metrics-scraper-6b4884c9d5-qccwt 1/1 Running 0 102s 172.18.229.75 binghe102

kubernetes-dashboard kubernetes-dashboard-7b544877d5-s8cgd 1/1 Running 0 102s 172.18.229.74 binghe102

[root@binghe101 ~]# kubectl get service -n kubernetes-dashboard -o wide

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR

dashboard-metrics-scraper ClusterIP 10.96.249.138 8000/TCP 2m21s k8s-app=dashboard-metrics-scraper

kubernetes-dashboard NodePort 10.96.219.128 443:30000/TCP 2m21s k8s-app=kubernetes-dashboard

7.创建dashboard管理员

创建dashboard-admin.yaml文件。

vim dashboard-admin.yaml

文件的内容如下所示。

apiVersion: v1

kind: ServiceAccount

metadata:

labels:

k8s-app: kubernetes-dashboard

name: dashboard-admin

namespace: kubernetes-dashboard

保存退出后执行如下命令创建管理员。

kubectl create -f ./dashboard-admin.yaml

8.为用户分配权限

创建dashboard-admin-bind-cluster-role.yaml文件。

vim dashboard-admin-bind-cluster-role.yaml

文件内容如下所示。

apiVersion: rbac.authorization.k8s.io/v1

架构学习资料

由于篇幅限制小编，pdf文档的详解资料太全面，细节内容实在太多啦，所以只把部分知识点截图出来粗略的介绍，每个小节点里面都有更细化的内容！
iVersion: rbac.authorization.k8s.io/v1

架构学习资料

[外链图片转存中…(img-0JnyfrST-1720082454035)]

[外链图片转存中…(img-jo5LVar2-1720082454036)]

[外链图片转存中…(img-4BhYpQzE-1720082454037)]

[外链图片转存中…(img-TvdUsh5N-1720082454037)]

[外链图片转存中…(img-WHJ2a985-1720082454038)]

由于篇幅限制小编，pdf文档的详解资料太全面，细节内容实在太多啦，所以只把部分知识点截图出来粗略的介绍，每个小节点里面都有更细化的内容！