7、kubernetes（k8s）Dashboard 安装

本文内容以语雀为准

说明

Kubernetes Dashboard 是一个通用的、基于Web的UI，用于Kubernetes集群管理。
它允许用户管理群集中运行的应用程序并对其进行故障排除，以及管理群集本身。
不同 Kubernetes Dashboard 支持的 Kubernetes 版本不同，可查看 Kubernetes Dashboard 发版日志中的说明：https://github.com/kubernetes/dashboard/releases ，下面列举最近几版的版本支持（仅列举了 完全支持的版本范围）
国内GitCode镜像仓库：https://gitcode.net/mirrors/kubernetes/dashboard
使用网址如：https://gitcode.net/mirrors/kubernetes/dashboard/-/raw/v2.7.0/aio/deploy/recommended.yaml ，只需要换一下标签名

Kubernetes Dashboard 版本	Kubernetes 版本
2.7.0	1.25	kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
2.6.1	1.24	kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.6.1/aio/deploy/recommended.yaml
2.6.0	1.24	kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.6.0/aio/deploy/recommended.yaml
2.5.1	1.23	kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yaml
2.5.0	1.23	kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.0/aio/deploy/recommended.yaml
2.4.0	1.20、1.21	kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.4.0/aio/deploy/recommended.yaml

参考链接

1. https://github.com/kubernetes/dashboard/blob/master/docs/user/accessing-dashboard/README.md
2. https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/README.md
3. https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md
4. 已上参考连接列举的都是最新版，请结合自身的版本选择对应的标签
5. 国内 GitCode 镜像仓库：https://gitcode.net/mirrors/kubernetes/dashboard

安装

1. 在管理节点上执行

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml

2. 查看是否创建完成

# kubernetes（k8s）Dashboard 的命名空间是 kubernetes-dashboard
kubectl get pods -n kubernetes-dashboard -o wide

[root@centos-7-9-14 ~]# kubectl get pods -n kubernetes-dashboard -o wide
NAME                                         READY   STATUS    RESTARTS   AGE   IP               NODE            NOMINATED NODE   READINESS GATES
dashboard-metrics-scraper-64bcc67c9c-w6z9g   1/1     Running   0          28m   172.16.191.252   centos-7-9-14   <none>           <none>
kubernetes-dashboard-5c8bd6b59-wh4vq         1/1     Running   0          28m   172.16.191.251   centos-7-9-14   <none>           <none>
[root@centos-7-9-14 ~]# 

kubectl -n kubernetes-dashboard get service kubernetes-dashboard

[root@centos-7-9-14 ~]# kubectl -n kubernetes-dashboard get service kubernetes-dashboard
NAME                   TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)   AGE
kubernetes-dashboard   ClusterIP   10.108.225.163   <none>        443/TCP   49m
[root@centos-7-9-14 ~]#

3. 修改 kubernetes-dashboard 服务，使其支持远程访问

# https://github.com/kubernetes/dashboard/blob/master/docs/user/accessing-dashboard/README.md
kubectl -n kubernetes-dashboard edit service kubernetes-dashboard

将 type: ClusterIP 修改成 type: NodePort 即可

4. 修改完成后，再次查看 kubernetes-dashboard 服务

kubectl -n kubernetes-dashboard get service kubernetes-dashboard

[root@centos-7-9-14 ~]# kubectl -n kubernetes-dashboard get service kubernetes-dashboard
NAME                   TYPE       CLUSTER-IP       EXTERNAL-IP   PORT(S)         AGE
kubernetes-dashboard   NodePort   10.108.225.163   <none>        443:30320/TCP   54m
[root@centos-7-9-14 ~]#

5. 由上一步执行的结果可以得出，使用 30320 即可访问 kubernetes-dashboard 服务
   假如集群的IP为 192.168.80.14，访问地址为 https://192.168.80.14:30320
6. 创建服务帐户

vim dashboard-adminuser.yaml

apiVersion: v1
kind: ServiceAccount
metadata:name: admin-usernamespace: kubernetes-dashboard

kubectl apply -f dashboard-adminuser.yaml

7. 创建群集角色绑定

vim cluster-admin.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: admin-user
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: cluster-admin
subjects:
- kind: ServiceAccountname: admin-usernamespace: kubernetes-dashboard

kubectl apply -f cluster-admin.yaml

8. 获取持有者令牌

# 指定有效期：--duration=315360000s
# 315360000s 代表 10年
kubectl -n kubernetes-dashboard create token admin-user

9. 使用上述令牌即可登录系统
10. 其他命令

kubectl -n kubernetes-dashboard delete serviceaccount admin-user

kubectl -n kubernetes-dashboard delete clusterrolebinding admin-user