Kubernetes仪表板 _Web运维

本文概述

什么是Kubernetes仪表板？
部署Kubernetes仪表板
访问Kubernetes仪表板
生成令牌以登录
kubeconfig
仪表板界面

一种更好的管理Kubernetes资源的方法。
什么是Kubernetes仪表板？ Kubernetes Dashboard是一个基于Web的用户界面, 用于可视化Kubernetes集群。它向你显示Kubernetes集群的详细信息, 其中包括集群中的节点, 名称空间, 卷, 集群角色, 作业详细信息等等。你只需单击几下即可通过Kubernetes仪表板部署容器化的应用程序, 并轻松管理所有群集资源。
先决条件
在设置Kubernetes仪表板之前, 你必须具有正在运行的Kubernetes集群。阅读本文以了解如何设置Kubernetes。
部署Kubernetes仪表板在主节点上运行kubectl命令, 以部署Kubernetes仪表板。

[email protected]:~$ sudo kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta8/aio/deploy/recommended.yaml namespace/kubernetes-dashboard created serviceaccount/kubernetes-dashboard created service/kubernetes-dashboard created secret/kubernetes-dashboard-certs created secret/kubernetes-dashboard-csrf created secret/kubernetes-dashboard-key-holder created configmap/kubernetes-dashboard-settings created role.rbac.authorization.k8s.io/kubernetes-dashboard created clusterrole.rbac.authorization.k8s.io/kubernetes-dashboard created rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created deployment.apps/kubernetes-dashboard created service/dashboard-metrics-scraper created deployment.apps/dashboard-metrics-scraper created

你可以看到仪表板窗格现在处于运行状态。

[email protected]:~$ kubectl get pods --all-namespaces NAMESPACE NAME READY STATUS RESTARTS AGE kube-system coredns-6955765f44-hwxdq 1/1 Running 0 6m35s kube-system coredns-6955765f44-z2tdg 1/1 Running 0 6m35s kube-system etcd-kubernetes-master 1/1 Running 0 6m45s kube-system kube-apiserver-kubernetes-master 1/1 Running 0 6m45s kube-system kube-controller-manager-kubernetes-master 1/1 Running 0 6m45s kube-system kube-proxy-4b5jz 1/1 Running 0 6m35s kube-system kube-proxy-v26wn 1/1 Running 0 26s kube-system kube-scheduler-kubernetes-master 1/1 Running 0 6m45s kubernetes-dashboard dashboard-metrics-scraper-76585494d8-czrtf 1/1 Running 0 2m37s kubernetes-dashboard kubernetes-dashboard-5996555fd8-5mhxm 1/1 Running 0 2m37s

访问Kubernetes仪表板运行以下命令以访问192.168.0.107:8001的Kubernetes仪表板(将此更改为你的IP)

[email protected]:~$ kubectl proxy --port=8001 --address='192.168.0.107' --accept-hosts="^*$" Starting to serve on 192.168.0.107:8001

【Kubernetes仪表板】打开浏览器并转到下面的链接以登录Kubernetes仪表板。
http://192.168.0.107:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/#/login

文章图片
这是登录Kubernetes仪表板的两种方法。

代币
kubeconfig

生成令牌以登录

在默认名称空间中, 创建一个服务帐户。

[email protected]:~$ kubectl create serviceaccount geekflare -n default serviceaccount/geekflare created

为新创建的服务帐户创建群集绑定规则。

[email protected]:~$ kubectl create clusterrolebinding geekflare-admin -n default --clusterrole=cluster-admin --serviceaccount=default:geekflare clusterrolebinding.rbac.authorization.k8s.io/geekflare-admin created

运行下面的kubectl命令以生成令牌

[email protected]:~$ kubectl get secret $(kubectl get serviceaccount geekflare -o jsonpath="{.secrets[0].name}") -o jsonpath="{.data.token}" | base64 --decode eyJhbGciOiJSUzI1NiIsImtpZCI6ImZxeUhfd0ROdE1qOWxqcFhQODR2NDVFaTJSQU85VHhyUnRneVRCZzBJVUkifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJkZWZhdWx0Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6ImRhc2hib2FyZC10b2tlbi02ajhyNSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJkYXNoYm9hcmQiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiJhNzBiNzZmZC1iMzI1LTRiNTUtYTc5YS0wZDRmNjAwNTI4MTAiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6ZGVmYXVsdDpkYXNoYm9hcmQifQ.KtOGDMp_llQ1_V5OpJGsXzPlDkKw2y4y9TowlTH7WnU84LZHZLPar65cVOh20kPkRGJZmKkmkjuXKc1VcmBJQQCLSJgXb3G-7-OSC8LvC-3ROA0cjsGqDuFtXvA4bjlRJ1wGmAmaCgO8oeXVHqciEjw9wcH5tPRKGlvXAESmDlxH_rVu_TJpqSAb2pp3V0_fpD7VxU34mSfLEoMImixHbCILt0YGS9VyEJUgzcOdfj2ZvECOEbD_Y5LPLcTe0fkBJvwIiIgwxCttFRXktdExo7Z17WlekZJLcCBzRWTfrWte8Ugf6vfpN7IfJVWqQLpDZ9XtgHavpXXeJbp2FljIFw

你可以使用生成的令牌(如上所示)登录到仪表板。
kubeconfig 另一种登录方式是使用Kubernetes配置文件。