Kubernetes CKS 2021【3】---Cluster Setup - Dashboard

Kubernetes CKS 2021【3】---Cluster Setup - Dashboard

文章目录

​​1. 介绍​​​​2. Practice -Install Dashboard​​​​3. Practice - RBAC for the Dashboard​​

1. 介绍

2. Practice -Install Dashboard

​​kubectl apply -f createdserviceaccount/kubernetes-dashboard createdservice/kubernetes-dashboard createdsecret/kubernetes-dashboard-certs createdsecret/kubernetes-dashboard-csrf createdsecret/kubernetes-dashboard-key-holder createdconfigmap/kubernetes-dashboard-settings createdrole.rbac.authorization.k8s.io/kubernetes-dashboard createdclusterrole.rbac.authorization.k8s.io/kubernetes-dashboard createdrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard createdclusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard createddeployment.apps/kubernetes-dashboard createdservice/dashboard-metrics-scraper createddeployment.apps/dashboard-metrics-scraper createdroot@master:~/dashboard# k -n kubernetes-dashboard get pod,svcNAME READY STATUS RESTARTS AGEpod/dashboard-metrics-scraper-79c5968bdc-92c6j 1/1 Running 0 4m19spod/kubernetes-dashboard-7448ffc97b-gspjg 1/1 Running 0 4m19sNAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGEservice/dashboard-metrics-scraper ClusterIP 10.98.155.160 8000/TCP 4m19sservice/kubernetes-dashboard ClusterIP 10.99.150.161 443/TCP 4m20sroot@master:~/dashboard# k -n kubernetes-dashboard edit deploy kubernetes-dashboard..... containers: - args: - --auto-generate-certificates - --namespace=kubernetes-dashboard image: kubernetesui/dashboard:v2.1.0 imagePullPolicy: Always......改为 spec: containers: - args: - --namespace=kubernetes-dashboard - --insecure-port=9090 image: kubernetesui/dashboard:v2.1.0root@master:~/dashboard# k -n kubernetes-dashboard get pod,svcNAME READY STATUS RESTARTS AGEpod/dashboard-metrics-scraper-79c5968bdc-92c6j 1/1 Running 0 14mpod/kubernetes-dashboard-6568c7684c-jgqf4 0/1 ContainerCreating 0 4spod/kubernetes-dashboard-7448ffc97b-gspjg 1/1 Running 0 14mNAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGEservice/dashboard-metrics-scraper ClusterIP 10.98.155.160 8000/TCP 14mservice/kubernetes-dashboard ClusterIP 10.99.150.161 443/TCP 14mroot@master:~/dashboard# k -n kubernetes-dashboard edit svc kubernetes-dashboardapiVersion: v1kind: Servicemetadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"k8s-app":"kubernetes-dashboard"},"name":"kubernetes-dashboard","namespace":"kubernetes-dashboard"},"spec":{"ports":[{"port":443,"targetPort":8443}],"selector":{"k8s-app":"kubernetes-dashboard"}}} creationTimestamp: "2021-04-21T02:55:03Z" labels: k8s-app: kubernetes-dashboard name: kubernetes-dashboard namespace: kubernetes-dashboard resourceVersion: "557996" uid: bd515d85-4dc6-4ac0-9890-ca2a711a7b26spec: clusterIP: 10.99.150.161 clusterIPs: - 10.99.150.161 ports: - port: 9090 #443改为9090 protocol: TCP targetPort: 9090 #8443改为9090 selector: k8s-app: kubernetes-dashboard sessionAffinity: None type: NodePort #ClusterIP改为NodePortstatus: loadBalancer: {}root@master:~/dashboard# k -n kubernetes-dashboard get svcNAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGEdashboard-metrics-scraper ClusterIP 10.98.155.160 8000/TCP 17mkubernetes-dashboard NodePort 10.99.150.161 9090:30613/TCP 17m

3. Practice - RBAC for the Dashboard

root@master:~/dashboard# k -n kubernetes-dashboard get saNAME SECRETS AGEdefault 1 26mkubernetes-dashboard 1 26mroot@master:~/dashboard# k get clusterroles |grep viewsystem:aggregate-to-view 2021-01-19T03:27:57Zsystem:public-info-viewer 2021-01-19T03:27:57Zview 2021-01-19T03:27:57Zroot@master:~/dashboard# k -n kubernets-dashboard create rolebinding insecure --serviceaccount kubernetes-dashboard:kubernetes-dashboard --clusterrole view -oyaml --dry-run=clientapiVersion: rbac.authorization.k8s.io/v1kind: RoleBindingmetadata: creationTimestamp: null name: insecure namespace: kubernets-dashboardroleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: viewsubjects:- kind: ServiceAccount name: kubernetes-dashboard namespace: kubernetes-dashboardroot@master:~/dashboard# k -n kubernetes-dashboard create rolebinding insecure --serviceaccount kubernetes-dashboard:kubernetes-dashboard --clusterrole viewrolebinding.rbac.authorization.k8s.io/insecure created

root@master:~/dashboard# k -n kubernetes-dashboard create clusterrolebinding insecure --serviceaccount kubernetes-dashboard:kubernetes-dashboard --clusterrole viewclusterrolebinding.rbac.authorization.k8s.io/insecure created

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。