k8s部署-安装k8s-dashboard

安装dashboard

下载yaml文件

wget https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml
#wget https://raw.githubusercontent.com/kubernetes/dashboard/master/src/deploy/recommended/kubernetes-dashboard.yaml

修改镜像

# sed -i 's/k8s.gcr.io/国内可访问镜像地址/g' kubernetes-dashboard.yaml
#参照部署k8s修改镜像地址为
#修改 
image: mirrorgooglecontainers/kubernetes-dashboard-amd64:v1.10.1

修改端口以及type nodePort 访问类型为外网访问

#The range of valid ports is 30000-32767

sed -i '/targetPort:/a\ \ \ \ \ \ nodePort: 30001\n\ \ type: NodePort' kubernetes-dashboard.yaml

本地执行部署Dashboard

kubectl create -f kubernetes-dashboard.yaml

检查相关服务运行状态

ubectl get deployment kubernetes-dashboard -n kube-system
kubectl get pods -n kube-system -o wide
kubectl get services -n kube-system
netstat -ntlp|grep 30001 

创建dashboard管理用户

kubectl create serviceaccount dashboard-admin -n kube-system

绑定用户为集群管理用户

kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin
kubectl create clusterrolebinding dashboard-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin

查看访问Dashboard的认证令牌两种均可

• 第一种

kubectl describe secrets -n kube-system $(kubectl -n kube-system get secret | awk '/dashboard-admin/{print $1}')

• 第二种

bashkubectl describe secret -n kube-system dashboard-admin

2、生成kubeconfig文件（微测试）

DASH_TOCKEN=$(kubectl get secret -n kube-system dashboard-admin-token-l7kpn -o jsonpath={.data.token}|base64 -d)

kubectl config set-cluster kubernetes --server=192.168.0.25:6443 --kubeconfig=/root/dashbord-admin.conf

kubectl config set-credentials dashboard-admin --token=$DASH_TOCKEN --kubeconfig=/root/dashbord-admin.conf

kubectl config set-context dashboard-admin@kubernetes --cluster=kubernetes --user=dashboard-admin --kubeconfig=/root/dashbord-admin.conf

kubectl config user-context dashboard-admin@kubernets --kubeconfig=/root/dashbord-admin.conf

#生成的dashbord-admin.conf即可用于登录dashboard
#token

eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJkYXNoYm9hcmQtYWRtaW4tdG9rZW4tdzZoNGQiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiZGFzaGJvYXJkLWFkbWluIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiOWVmOGY1NmItM2JkOS00ZThjLTk2ZTUtMzEzYzJkOTUzNmQ5Iiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50Omt1YmUtc3lzdGVtOmRhc2hib2FyZC1hZG1pbiJ9.P7PWdoZ8BWSp1DZ1d3tGzwKwpW7-HUnW3MGMEwDLqk2AoNQWhH-rQgm2sJQyDnnJapwPeZPZ19NJNjdyZ7XS2FKmHSe5HZimLWJGux38dwsF_KcnPIORpR-CdU9cvK-jca8sikMCSx1nOv9aOsrBbQN6VgP-82WfZeg4FZIuf6Qb-lSdnTciJHrl02qQZI3ghUpR2tf5aN3N_38gnO6mH7ERdqMTzS6WeaA1kIVGBgoPhhozJza4zshiW5A9AtU15vQ74DjS-iJdUOsk7DqyB_7r5NptVtof59Ir1GURl266wlYGUUhTgPtwxmL-Q72nixhGRyKStsR3tyxPtIV_BQ