kubenetes 1.16.0安装kubernetes-dashboard v2.0.0-beta4

kubenetes github ：https://github.com/kubernetes/dashboard/releases

kubenetes官网：https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/

本人安装kubenetes 1.16.0，刚开始使用kubernetes-dashboard v1.10.1安装后，首页访问接口报错404，怀疑是版本不兼容问题。后面发现kubernetes-dashboard最新版本已经是v2.0.0-beta4。并且kubenetes官方文档安装dashboard的描述，指明部署方法

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta4/aio/deploy/recommended.yaml

https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta4/aio/deploy/recommended.yaml

所以kubenetes v1.16.0 应该使用新版dashboard ui才兼容

 

查看github，用到的镜像有两个dashboard:v2.0.0-beta4、metrics-scraper:v1.0.1

kubernetesui/dashboard:v2.0.0-beta4

kubernetesui/metrics-scraper:v1.0.1

先拉取镜像，本人使用的docker版本19.03.2

docker pull kubernetesui/dashboard:v2.0.0-beta4

kubernetesui/metrics-scraper:v1.0.1

拉成功后

获取yaml文件

https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta4/aio/deploy/recommended.yaml

修改recommended.yaml文件，为了方便访问，修改kubernetes-dashboard的Service定义，指定Service的type类型为NodeType，指定nodePort端口

kind: Service
apiVersion: v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
spec:
  type: NodePort # 改成NodePort
  ports:
    - port: 443
      targetPort: 8443
      nodePort: 31001 # 指定nodePort端口
  selector:
    k8s-app: kubernetes-dashboard

注：dashboard-metrics-scraper的Service不需要修改

从配置文件可以看到，它还创建了ServiceAccount帐号

apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard

还创建了ClusterRoleBinding

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: kubernetes-dashboard
subjects:
  - kind: ServiceAccount
    name: kubernetes-dashboard
    namespace: kubernetes-dashboard

查看token

kubectl describe secret/$(kubectl get secret -n kube-system |grep admin|awk '{print $1}') -n kube-system

Name:         dashboard-admin-token-kzb4v
Namespace:    kube-system
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: dashboard-admin
              kubernetes.io/service-account.uid: 71a2e37c-6fee-4921-ae7a-34965e6a75d8

Type:  kubernetes.io/service-account-token

Data
====
ca.crt:     1025 bytes
namespace:  11 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6InZrcFpzWWozWXQwTURqcVpEZDdwcklVVTREbGNBMXFGUnRNZDVyYWhlT3cifQ.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.TbykeQK204jUz-A88qw34KwFhLsfwkqqkv4hyUfI72XdmoAU1HCj0-_pppRL4p3HWpiNkUiKR4tzZ34YFHVGVIpGLRIW0QAPQ6eEMf1OdS3KShQQx-tOo-2kESZ8hg_mY66uq0sFRXMAd6AiOhzSF-vunMpgxlE9nH5_eE3RHQ6vEXSVFuH4x0eLc4bAu2PwPObdJ-ngdEr-HysrQn2oXM4oXaHZGR3fiyXZdmVFeDqkmsEXuGpTtgTzHwX5WRd4ZyDJsds6LDRDpa654gFmbX_RV4Wr64ankK2_vgM1GDtvy8m4ys17TieBZoRPfPBTgaReN7RObqNc1qlxQHyMsg

把token复制到页面上登录，前面指定的端口是31001，网址为https://192.168.200.207:31001

选择token方式，输入token，sign in