50、k8s-DashBoard（k8s的web）-部署

 

1、下载yaml文件：https://github.com/kubernetes/dashboard/blob/v2.0.0/aio/deploy/recommended.yaml
2、修改yaml文件的service 配置：
---------------------------------------------
---kind: Service
apiVersion: v1
metadata:labels:k8s-app: kubernetes-dashboardname: kubernetes-dashboardnamespace: kubernetes-dashboard
spec:type: NodePort        #新增 允许外部访问ports:- port: 443targetPort: 8443nodePort: 30009   #自定义外部访问端口selector:k8s-app: kubernetes-dashboard---
-------------------------------------------------------------------3、执行yaml文件部署dashboard：·kubectl create -f recommended.yaml
4、查看svc和pod：·kubectl get svc,pods -n kubernetes-dashboard------------------------------------------------------------------------------------NAME                                TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)         AGEservice/dashboard-metrics-scraper   ClusterIP   10.111.75.214   <none>        8000/TCP        70sservice/kubernetes-dashboard        NodePort    10.107.18.72    <none>        443:30009/TCP   70sNAME                                            READY   STATUS              RESTARTS   AGEpod/dashboard-metrics-scraper-c79c65bb7-m294t   0/1     ContainerCreating   0          70spod/kubernetes-dashboard-56484d4c5-hzjr7        0/1     ContainerCreating   0          70s
-----------------------------------------------------------------------------------------------------------------------
5、访问网页：https://192.168.177.160:30009    #建议使用火狐浏览器访问
6、登录需要Token、创建访问账号、获取token：#dashboard-admin 用户名     给用户授权 -n （namespace的权限）  kubernetes-dashboard ·创建账号：kubectl create serviceaccount dashboard-admin -n kubernetes-dashboard·授权：kubectl create clusterrolebinding dashboard-admin-rb --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:dashboard-admin
7、获取账号token：·kubectl get secrets -n kubernetes-dashboard | grep dashboard-admin--------------------------------------------------------------------------------------------dashboard-admin-token-k4dnd        kubernetes.io/service-account-token   3      12m-----------------------------------------------------------------------------------------------·kubectl describe secrets dashboard-admin-token-k4dnd -n kubernetes-dashboard-----------------------------------------------------------------------------------------------------Name:         dashboard-admin-token-k4dndNamespace:    kubernetes-dashboardLabels:       <none>Annotations:  kubernetes.io/service-account.name: dashboard-adminkubernetes.io/service-account.uid: 090ce79e-641f-4e0c-a5e8-db4706db5f0dType:  kubernetes.io/service-account-tokenData====token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IjNoaGU0RHUwdkYtVG1OYm5tQ3laOFluZENLTWRUbmQwVDEwQkgtdTZ6RjgifQ.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.6GEDXcdtMzyWfT4v60FRGV6Du-dVcvJCvGQk-Owj8ro6nLZYwfjhv5EkW8zMjTKdBGtOdyBYoP_BcBc7Gw_1W5xY_RwApps29p3nnLkzPoXqGEnOYnf2cNT6K9ufhw-68d7qaSd0ly7qQEyMuoR38hx7_9dO2MyuwhCF4tW8inrQWVq3Ume7vKbVXyo9nRGZ2xDgjoWgsGz3Gzc6W7_PN7CmqsLUeOefCyZgq4NWeTVHFWXk_X59cPVrRTb2o8biV8IctwTl9ccLdhsUIk8xf9nkCBErhpTRvH3ztpOUFnU5QZR1NyqyoTU9WwZaIam47kSI-6ATnIxAYRKa9gZhbQca.crt:     1025 bytesnamespace:  20 bytes-----------------------------------------------------------------------------------------------------------------------------------------
8、将获取的token写入到网页：