k8s学习笔记——dashboard安装

//安装dashboard
curl https://raw.githubusercontent.com/kubernetes/dashboard/v2.2.0/aio/deploy/recommended.yaml

kubectl apply -f ./recommended.yaml

//创建serviceaccount
kubectl create serviceaccount dashboard-admin -n kubernetes-dashboard

//创建clusterrolebinding绑定
kubectl create clusterrolebinding dashboard-cluster-admin --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:dashboard-admin

//查看登录token
kubectl get secret -n kubernetes-dashboard
kubectl describe secret dashboard-admin-token-XXXXX -n kubernetes-dashboard

//发布svc端口
kubectl get svc -n kubernetes-dashboard
kubectl patch svc kubernetes-dashboard -n kubernetes-dashboard -p '{"spec":{"type":"NodePort"}}'

//配置用户权限账号(只能访问default空间)
kubectl create serviceaccount def-ns-admin

kubectl create rolebinding def-ns-admin --clusterrole=admin --serviceaccount=default:def-ns-admin

kubectl config set-cluster kubernetes --certificate-authority=/etc/kubernetes/pki/ca.crt --server="https://10.12.70.130:6443" --embed-certs=true --kubeconfig=./def-ns-admin.conf

KUBE_TOKEN=$(kubectl get secert $(kubectl get secert | awk '/^def-ns-admin/{print $1}') -o jsonpath={.data.token} | base64 -d)

kubectl config set-credentials def-ns-admin --token=$KUBE_TOKEN --kubeconfig=./def-ns-admin.conf

kubectl config set-context def-ns-admin@kubernetes --cluster=kubernetes --user=def-ns-admin --kubeconfig=./def-ns-admin.conf

kubectl config use-context def-ns-admin@kubernetes --kubeconfig=./def-ns-admin.conf

//查看conf文件
kubectl config view --kubeconfig=./def-ns-admin.conf

//拷贝def-ns-admin.conf文件到桌面，在网页登录界面选择kubeconfig,选择该文件登录