dashboard的搭建

实验环境：

k8s-master:192.168.0.30

k8s-node1:192.168.0.40

k8s-node2:192.168.0.50

这里安装 v2.3.1版本，kubernetes版本在1.20以上

1、下载镜像

[root@k8s-1 ~]# docker  pull  kubernetesui/dashboard:v2.3.1

[root@k8s-1 ~]# docker  pull  kubernetesui/metrics-scraper:v1.0.6

2、下载yaml文件

[root@k8s-1 ~]#  wget  https://raw.githubusercontent.com/kubernetes/dashboard/v2.3.1/aio/deploy/recommended.yaml

3、编辑recommended.yaml，需要对外访问，在文件service里添加一行type：

  kind: Service
apiVersion: v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
spec:
  type: NodePort
  ports:
    - port: 443
      targetPort: 8443
  selector:
    k8s-app: kubernetes-dashboard
  type: NodePort 

4、启动yaml文件

[root@k8s-1 ~]# kubectl apply -f recommended.yaml 
namespace/kubernetes-dashboard created
serviceaccount/kubernetes-dashboard created
service/kubernetes-dashboard created
secret/kubernetes-dashboard-certs created
secret/kubernetes-dashboard-csrf created
secret/kubernetes-dashboard-key-holder created
configmap/kubernetes-dashboard-settings created
role.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrole.rbac.authorization.k8s.io/kubernetes-dashboard created
rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
deployment.apps/kubernetes-dashboard created
service/dashboard-metrics-scraper created
deployment.apps/dashboard-metrics-scraper created

5、查看是否启动成功

[root@k8s-1 ~]# kubectl get service -n kubernetes-dashboard 
NAME                        TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)         AGE
dashboard-metrics-scraper   ClusterIP   10.97.244.157   <none>   8000/TCP        106s
kubernetes-dashboard        NodePort    10.111.165.89   <none>    443:31857/TCP   106s

6、创建serviceAccount，假如用户名为dashboard-admin

[root@k8s-1 ~]# kubectl create serviceaccount dashboard-admin -n kube-system
 serviceaccount/dashboard-admin created

7、通过clusterrolebinding绑定到内置的cluster-admin角色上

[root@k8s-1 ~]# kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin
clusterrolebinding.rbac.authorization.k8s.io/dashboard-admin created

8、查看token值名称，并查看token值

[root@k8s-1 ~]# kubectl get secrets -n kube-system
NAME                                             TYPE                                  DATA   AGE
attachdetach-controller-token-rpr2q              kubernetes.io/service-account-token   3      13d
bootstrap-signer-token-w8csk                     kubernetes.io/service-account-token   3      13d
certificate-controller-token-w9qks               kubernetes.io/service-account-token   3      13d
clusterrole-aggregation-controller-token-5zvx2   kubernetes.io/service-account-token   3      13d
coredns-token-ltnts                              kubernetes.io/service-account-token   3      13d
cronjob-controller-token-2fdhc                   kubernetes.io/service-account-token   3      13d
daemon-set-controller-token-hj7lr                kubernetes.io/service-account-token   3      13d
dashboard-admin-token-h8swh                      kubernetes.io/service-account-token   3      4m10s
default-token-4fckd                              kubernetes.io/service-account-token   3      13d
deployment-controller-token-n9nzw                kubernetes.io/service-account-token   3      13d
disruption-controller-token-5sxlg                kubernetes.io/service-account-token   3      13d
endpoint-controller-token-bztf5                  kubernetes.io/service-account-token   3      13d
endpointslice-controller-token-8zmh7             kubernetes.io/service-account-token   3      13d
endpointslicemirroring-controller-token-bg9xx    kubernetes.io/service-account-token   3      13d
ephemeral-volume-controller-token-zdcgk          kubernetes.io/service-account-token   3      13d
expand-controller-token-h8hr9                    kubernetes.io/service-account-token   3      13d
flannel-token-v4qs6                              kubernetes.io/service-account-token   3      13d
generic-garbage-collector-token-mw5qh            kubernetes.io/service-account-token   3      13d
horizontal-pod-autoscaler-token-2vfpr            kubernetes.io/service-account-token   3      13d
job-controller-token-gk6g9                       kubernetes.io/service-account-token   3      13d
kube-proxy-token-pmrrq                           kubernetes.io/service-account-token   3      13d
namespace-controller-token-mxkrw                 kubernetes.io/service-account-token   3      13d
node-controller-token-lbfqp                      kubernetes.io/service-account-token   3      13d
persistent-volume-binder-token-4g9vr             kubernetes.io/service-account-token   3      13d
pod-garbage-collector-token-lz5k9                kubernetes.io/service-account-token   3      13d
pv-protection-controller-token-n6w8g             kubernetes.io/service-account-token   3      13d
pvc-protection-controller-token-k2n2k            kubernetes.io/service-account-token   3      13d
replicaset-controller-token-q759t                kubernetes.io/service-account-token   3      13d
replication-controller-token-lsncs               kubernetes.io/service-account-token   3      13d
resourcequota-controller-token-m4fv6             kubernetes.io/service-account-token   3      13d
root-ca-cert-publisher-token-kzcdb               kubernetes.io/service-account-token   3      13d
service-account-controller-token-44489           kubernetes.io/service-account-token   3      13d
service-controller-token-kd69r                   kubernetes.io/service-account-token   3      13d
statefulset-controller-token-vzd6b               kubernetes.io/service-account-token   3      13d
token-cleaner-token-d6t8x                        kubernetes.io/service-account-token   3      13d
ttl-after-finished-controller-token-dxrxj        kubernetes.io/service-account-token   3      13d
ttl-controller-token-vqqnq                       kubernetes.io/service-account-token   3      13d

[root@k8s-1 ~]# kubectl describe secrets -n kube-system dashboard-admin-token-h8swh
Name:         dashboard-admin-token-h8swh
Namespace:    kube-system
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: dashboard-admin
              kubernetes.io/service-account.uid: f801cd67-4dea-436e-b4d6-dbb9b253a64f

Type:  kubernetes.io/service-account-token

Data
====
namespace:  11 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6Imp6UWZZV0lkT0d3MXJmSmJNajJSYWRqTHJRZTk5WEljTDMzSmx0azQ0MWcifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJkYXNoYm9hcmQtYWRtaW4tdG9rZW4taDhzd2giLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiZGFzaGJvYXJkLWFkbWluIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiZjgwMWNkNjctNGRlYS00MzZlLWI0ZDYtZGJiOWIyNTNhNjRmIiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50Omt1YmUtc3lzdGVtOmRhc2hib2FyZC1hZG1pbiJ9.jMqesAmFveGOK703DhBSbpmD-cuGqvWsicsXPw2-yJE9JUqpmjI-VNlaSGeEOeJjEmTt8ppIZKZCFmWs1T0PpwzP08LiUrAYgezIkLx3WK3of-OcpVv2HRSccZ6Z6dTbaQ2gATs8BYsYmCLe9YaE3piBbsgDHcgNXv58-Y0b7faRZJX8VknfrJpgJlyyAaU37QxoH7t1hNQ0skQPFPGndSljc3mdS0Ci_nDAbC-tVYE8LmoIRi3s4UKJg1z7XlqVoy7m9O6uxfxh4nZNLyv7XJVhvjfAQe0gCZYJfln2fbns1A75M1TaUkl9Bo9AXAYwioljHAdfBuuNVxROqHJteQ
ca.crt:     1066 bytes

9、在浏览器输入https://192.168.0.30:31857,选择token，复制上面的token值,黏贴到横线上。

10、接下来就可以管理容器的了，把default换成kubernetes dashboard就可以看到容器

11、可以自己创建deployment，点击左侧的Deployment，选择右上角的+，选择从表单创建就可以了。