Kubernetes之dashboard 2.x 部署

Kubernetes之dashboard 2.x 部署

开始部署

Gitlab 项目地址：创建证书：

mkdir dashboard-certscd dashboard-certs/#创建命名空间kubectl create namespace kubernetes-dashboard# 创建key文件openssl genrsa -out dashboard.key 2048#证书请求openssl req -new -key dashboard.key -out dashboard.csr -subj '/CN=dashboard-cert'#自签证书，指定证书的有效期天数。openssl x509 -req -days 3650 -in dashboard.csr -signkey dashboard.key -out dashboard.crt# 查看证书有效期openssl x509 -noout -text -in dashboard.crt#创建kubernetes-dashboard-certs对象kubectl create secret generic kubernetes-dashboard-certs --from-file=dashboard.key --from-file=dashboard.crt -n kubernetes-dashboard

ubuntu18.04时生成CSR时报错

Can't load /root/.rnd into RNG140496635077056:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/root/.rnd

解决办法:

cd /rootopenssl rand -writerand .rnd

2) 下载并修改​​recommended.yaml​​文件

wget 安装​​Dashboard​​

#安装kubectl apply -f ~/recommended.yaml#检查结果kubectl get pods -A -o widekubectl get service -n kubernetes-dashboard -o wide

4) 创建​​Dashboard​​​管理员账号​​dashboard-admin.yaml​​​，并​​apply​​

自带的 serviceaccount 账号的权限有限，所以咱重新创建一个serviceaccount 账号，来登录dashboard。

apiVersion: v1kind: ServiceAccountmetadata: labels: k8s-app: kubernetes-dashboard name: dashboard-admin namespace: kubernetes-dashboard

5) 赋权​​dashboard-admin-bind-cluster-role.yaml​​，并​​apply​​

apiVersion: rbac.authorization.k8s.io/v1kind: ClusterRoleBindingmetadata: name: dashboard-admin-bind-cluster-role labels: k8s-app: kubernetes-dashboardroleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-adminsubjects:- kind: ServiceAccount name: dashboard-admin namespace: kubernetes-dashboard

6) 复制​​token​​，并登录​​-n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep dashboard-admin | awk '{print $1}')

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。