本文作者：丁辉

官方文档

Github文档

部署Kubernetes仪表板

1. 部署 Dashboard UI

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml

2. 编辑对外 svc 文件

vi kubernetes-dashboard-svc.yaml

apiVersion: v1
kind: Service
metadata:
  name: kubernetes-dashboard-40000
  labels:
    k8s-app: kubernetes-dashboard
  namespace: kubernetes-dashboard
spec:
  ports:
  - name: kubernetes-dashboard
    nodePort: 40000
    port: 443
    protocol: TCP
    targetPort: 8443
  selector:
    k8s-app: kubernetes-dashboard
  type: NodePort

部署

kubectl apply -f kubernetes-dashboard-svc.yaml

查看状态

kubectl get all -n kubernetes-dashboard

3. 获取长期令牌

vi kubernetes-dashboard-token.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kubernetes-dashboard
---
apiVersion: v1
kind: Secret
metadata:
  name: admin-user
  namespace: kubernetes-dashboard
  annotations:
    kubernetes.io/service-account.name: "admin-user"   
type: kubernetes.io/service-account-token  

创建

kubectl apply -f kubernetes-dashboard-token.yaml

查看 token

kubectl get secret admin-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d