#mkdir dashboard
#helm fetch stable/kubernetes-dashboard //从仓库中获取stable/kubernetes-dashboard 提示需要更新仓库
#helm repo update 更新仓库
#helm fetch stable/kubernetes-dashboard //从仓库中获取stable/kubernetes-dashboard
#tar -zxvf kubernetes-dashboard-1.10.1.tgz //不可信的旧时间戳忽略
#cd kubernetes-dashboard
#vim kubernetes-dashboard.yaml
image:
repository: k8s.gcr.io/kubernetes-dashboard-amd64
tag: v1.10.1
ingress:
enabled: true
hosts:
- k8s.frognew.com
annotations:
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
tls:
- secretName: frognew-com-tls-secret
hosts:
- k8s.frognew.com
rbac:
clusterAdminRole: true
上传dashboard 镜像给所有节点 docker load -i dashboard.tar
#helm install . -n kubernetes-dashboard \
--namespace kube-system \
-f kubernetes-dashboard.yaml
#修改svc的访问方式为NodePort
kubectl get svc -n kube-system
kubectl edit svc SVC_NAME -n kube-system
type:NodePort
kubectl get svc -n kube-system
#网页访问(火狐浏览器):
https://192.168.88.10:30122 #必须输https://
令牌访问:获取令牌
#kubectl -n kube-system get secret | grep kubernetes-dashboard-token
#kubectl describe secret [SECRET_NAME] -n kube-system
复制token输入令牌中。
eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJrdWJlcm5ldGVzLWRhc2hib2FyZC10b2tlbi05bHBrdCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6IjEzZDAyZWIwLWZlZjEtNGYwYS1iNjY4LTAxZWJlOTI3NmQxZiIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDprdWJlLXN5c3RlbTprdWJlcm5ldGVzLWRhc2hib2FyZCJ9.pfzcOMFsgLF91rTBNeDBbzHcQPBtkTahcFBq91RqzUwY71BUmGAx9LaoNZSYfCyzWke-dD0jN6x9NjE5OpKH6sorqbsJHhX1P1hn_FVyoDX1qNz7A3OwPhylph2N5QCnkEfFcQvtDuUgddL6wWkExdX4mCwuCGeVg3eapBs6zTz1VYYYrNy93uBcUKWbmZkxzB5U5WNSLm3o3cVf2bppIZp5lCGuXPpchpJoKOBg4AMLkco8O3RP48JjE875pQ14tAdT8N8R1D5HcxuOYbIRRgLaN7PT7TpLHiPF7jDYob9SOgHydHeB61I8TOBVpnR8ISKjid0LpQmtQYZ2A-1CdA