1.在kubernetes集群上运行dashboard相关的pod和资源
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-rc5/aio/deploy/recommended.yaml
参考git上的dashboard项目
https://github.com/kubernetes/dashboard
2.修改dashboard的service的类型为nodeport,以供外网访问
kubectl patch service kubernetes-dashboard -p ‘{“spec”:{“type”:“NodePort”}}’ -n kubernetes-dashboard
3.使用任意一个节点地址和service映射的port访问,注意是https协议。
列如,https://192.168.222.144:32495/
4.登陆有2种方式,
Token:
4.1 创建登陆使用的serviceAccount
kubectl create serviceaccount dashboard-admin
4.2 给新建的sa赋予权限
kubectl create clusterrolebinding dashboard-admin-rolebinding --clusterrole=cluster-admin --serviceaccount=default:dashboard-admin
4.3 查看sa附带生成的secret里的token,并使用token登陆
kubectl get secret
kubectl describe dashboard-admin-token-5rsk6
Kubeconfig(实际还是拿token来登陆):
4.1 创建登陆使用的serviceAccount
kubectl create serviceaccount dashboard-admin
4.2 给新建的sa赋予权限
kubectl create clusterrolebinding dashboard-admin-rolebinding --clusterrole=cluster-admin --serviceaccount=default:dashboard-admin
4.3 获取sa对应的token到环境变量
DASH_TOCKEN=
(
k
u
b
e
c
t
l
g
e
t
s
e
c
r
e
t
d
a
s
h
b
o
a
r
d
−
a
d
m
i
n
−
t
o
k
e
n
−
5
r
s
k
6
−
o
j
s
o
n
p
a
t
h
=
.
d
a
t
a
.
t
o
k
e
n
∣
b
a
s
e
64
−
d
)
4.4
配
置
k
u
b
e
c
o
n
f
i
g
文
件
4.4.1
k
u
b
e
c
t
l
c
o
n
f
i
g
s
e
t
−
c
l
u
s
t
e
r
k
u
b
e
r
n
e
t
s
−
−
s
e
r
v
e
r
=
192.168.222.141
:
6443
−
−
k
u
b
e
c
o
n
f
i
g
=
/
r
o
o
t
/
k
8
s
/
c
o
n
f
i
g
2
/
d
a
s
h
b
o
a
r
d
−
a
d
m
i
n
.
c
o
n
f
4.4.2
k
u
b
e
c
t
l
c
o
n
f
i
g
s
e
t
−
c
r
e
d
e
n
t
i
a
l
s
d
a
s
h
b
o
a
r
d
−
a
d
m
i
n
−
−
t
o
k
e
n
=
(kubectl get secret dashboard-admin-token-5rsk6 -o jsonpath={.data.token}|base64 -d) 4.4 配置kubeconfig文件 4.4.1 kubectl config set-cluster kubernets --server=192.168.222.141:6443 --kubeconfig=/root/k8s/config2/dashboard-admin.conf 4.4.2 kubectl config set-credentials dashboard-admin --token=
(kubectlgetsecretdashboard−admin−token−5rsk6−ojsonpath=.data.token∣base64−d)4.4配置kubeconfig文件4.4.1kubectlconfigset−clusterkubernets−−server=192.168.222.141:6443−−kubeconfig=/root/k8s/config2/dashboard−admin.conf4.4.2kubectlconfigset−credentialsdashboard−admin−−token=DASH_TOCKEN --kubeconfig=/root/k8s/config2/dashboard-admin.conf
4.4.3 kubectl config set-context dashboard-admin@kubernetes --cluster=kubernetes --user=dashboard-admin --kubeconfig=/root/k8s/config2/dashboard-admin.conf
4.4.4 kubectl config use-context dashboard-admin@kubernetes --kubeconfig=/root/k8s/config2/dashboard-admin.conf
4.5 获取对应的conf文件,并使用登陆
/root/k8s/config2/dashboard-admin.conf