部署k8s-dashboard

一：
master上面做：
[root@master-iot ~]# wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta8/aio/deploy/recommended.yaml
替换镜像image: kubernetesui/dashboard:v2.0.0-beta8
[root@master-iot ~]# kubectl apply -f recommended.yaml
[root@master-iot ~]# kubectl get svc -n kubernetes-dashboard
NAME                        TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)         AGE
dashboard-metrics-scraper   ClusterIP   10.96.151.41    <none>        8000/TCP        10m
kubernetes-dashboard        NodePort    10.96.153.137   <none>        443:32655/TCP   10m
改变svc类型type: NodePort
[root@master-iot ~]# vim admin-token.yaml
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: admin
  annotations:
    rbac.authorization.kubernetes.io/autoupdate: "true"
roleRef:
  kind: ClusterRole
  name: cluster-admin
  apiGroup: rbac.authorization.k8s.io
subjects:
- kind: ServiceAccount
  name: admin
  namespace: kube-system
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin
  namespace: kube-system
  labels:
    kubernetes.io/cluster-service: "true"
    addonmanager.kubernetes.io/mode: Reconcile
[root@master-iot ~]# kubectl apply -f admin-token.yaml
获取token
[root@master-iot ~]# kubectl describe secret/$(kubectl get secret -nkube-system |grep admin|awk '{print $1}') -nkube-system
Name:         admin-token-tf95x
Namespace:    kube-system
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: admin
              kubernetes.io/service-account.uid: 16397a22-4c4e-4803-98b8-54015747b4d4

Type:  kubernetes.io/service-account-token

Data
====
ca.crt:     1025 bytes
namespace:  11 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IndvaDJZZmwxbzRodmZkdzBqZUdjU29RNjhIYmdRX0ZFUWFtdXVHWnowU3cifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi10b2tlbi10Zjk1eCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJhZG1pbiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6IjE2Mzk3YTIyLTRjNGUtNDgwMy05OGI4LTU0MDE1NzQ3YjRkNCIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDprdWJlLXN5c3RlbTphZG1pbiJ9.hv7XSnkO7UstD8gYisubGkiplt6cfDQOjoYXdJovc7njwsaOV0K9QvQDY34UExlU5dEVl7OpuE5FjLjtx_TbZC5Z-qSUpjnyH0cSEuZM5cC64pqITrjGOAX5oOXmzmjfUi8qfdnD0Yuhw9O9kLo8l53jq_xm4kuzDd4aT5uc649w0OuaYIDGNVRpy8Y8ml-9pSuj2juVDTskhAhi7EJbYKueEtntP3PRXoZsSBysPr_r7FCrmrAqQIrBfAnVLSuLDeP2aAnfydJjPwp7J5etcWPDD8O_w-SAaJZiqCSZoKGCOaah5ZwI2ypTrVlvLthouBXvMFKpCXCGDGX8D6nWtw
[root@master-iot ~]# kubectl get svc -n kubernetes-dashboard
NAME                        TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)         AGE
dashboard-metrics-scraper   ClusterIP   10.96.151.41    <none>        8000/TCP        13m
kubernetes-dashboard        NodePort    10.96.153.137   <none>        443:32655/TCP   13m
打开火狐浏览器访问https://ip:port
验证选择令牌，将token复制进去即可