1、安装K8S
https://github.com/gjmzj/kubeasz/blob/master/docs/setup/quickStart.md
2、安装Dashboard
https://github.com/gjmzj/kubeasz/blob/master/docs/guide/dashboard.md
3、登录Dashboard
访问https://192.168.64.233:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy报401错误,如下所示
采用NodePort方式登录:
[root@localhost dashboard]# kubectl -n kube-system get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
heapster ClusterIP 10.68.235.131 <none> 80/TCP 64m
kube-dns ClusterIP 10.68.0.2 <none> 53/UDP,53/TCP,9153/TCP 65m
kubernetes-dashboard NodePort 10.68.50.98 <none> 443:27117/TCP 64m
metrics-server ClusterIP 10.68.150.160 <none> 443/TCP 65m
traefik-ingress-service NodePort 10.68.62.14 <none> 80:23456/TCP,8080:24495/TCP 64m
在虚拟机中的浏览器输入https://192.168.64.233:27117 后可以正常展示登录界面,其中192.168.64.233为虚拟机的IP地址
创建dashboard rbac超级用户
创建用户:kubectl apply -f /etc/ansible/manifests/dashboard/admin-user-sa-rbac.yaml
获取Token:kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')
创建dashboard rbac普通用户
创建用户:kubectl apply -f /etc/ansible/manifests/dashboard/read-user-sa-rbac.yaml
获取Token:kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep read-user | awk '{print $1}')