Kubernetes------Dashboard部署

Dashboard部署

创建dashboard工作目录，并上传五个文件
[root@master1 ~]# mkdir dashboard
[root@master1 ~]# cd dashboard/
[root@master1 ~/dashboard]# ls
dashboard-configmap.yaml dashboard-controller.yaml dashboard-rbac.yaml dashboard-secret.yaml dashboard-service.yaml

创建文件（创建顺序：rbac.yaml（访问控制）---->secret.yaml（安全）---->configmap.yaml（配置）---->controller.yaml（控制器）----->service.yaml（服务））

①dashboard-rbac.yaml （角色控制，访问控制资源）

kind: Role				#角色
apiVersion: rbac.authorization.k8s.io/v1	#api版本号（有专门的版本号控制）
metadata:			#源信息
  labels:
    k8s-app: kubernetes-dashboard
    addonmanager.kubernetes.io/mode: Reconcile
  name: kubernetes-dashboard-minimal	#创建的资源名称
  namespace: kube-system
rules:				#参数信息的传入
  # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- apiGroups: [""]
  resources: ["secrets"]
  resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs"]
  verbs: ["get", "update", "delete"]
  # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- apiGroups: [""]
  resources: ["configmaps"]
  resourceNames: ["kubernetes-dashboard-settings"]
  verbs: ["get", "update"]
  # Allow Dashboard to get metrics from heapster.
- apiGroups: [""]
  resources: ["services"]
  resourceNames: ["heapster"]
  verbs: ["proxy"]
- apiGroups: [""]
  resources: ["services/proxy"]
  resourceNames: ["heapster", "http:heapster:", "https:heapster:"]
  verbs: ["get"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: kubernetes-dashboard-minimal
  namespace: kube-system
  labels:
    k8s-app: kubernetes-dashboard
    addonmanager.kubernetes.io/mode: Reconcile
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: kubernetes-dashboard-minimal
subjects:
- kind: ServiceAccount
  name: kubernetes-dashboard
  namespace: kube-system	#名称空间的管理（默认为default）

创建dashboard-rbac.yaml资源

#-f 以文件的格式创建yaml资源
[root@master1 ~/dashboard]# kubectl create -f dashboard-rbac.yaml 
role.rbac.authorization.k8s.io/kubernetes-dashboard-minimal created
rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard-minimal created

#查看Role角色kube-system名称空间中的资源
[root@master1 ~/dashboard]# kubectl get Role -n kube-system
NAME                                             AGE
extension-apiserver-authentication-reader        5h39m
kubernetes-dashboard-minimal                     45s