經過kubeadm快速完成了kubernetes的安裝,便可迅速地體驗到kubernetes的強大功能。美中不足的是,只能經過命令來查看或操做,沒有一個直觀且簡潔的Web UI來感覺一下這種成功的喜悅。此外,國內的網絡環境,也在某種程度上增長了一些門檻。面對如此種種,依然有辦法體驗kunernetes dashboard。git
由於不清楚Pod會被調度到哪個Node上,因此在每個節點上執行如下腳本:github
#!/bin/bash docker pull registry.cn-qingdao.aliyuncs.com/wangxiaoke/kubernetes-dashboard-amd64:v1.10.0 # docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.0 docker tag registry.cn-qingdao.aliyuncs.com/wangxiaoke/kubernetes-dashboard-amd64:v1.10.0 k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.0 docker image rm registry.cn-qingdao.aliyuncs.com/wangxiaoke/kubernetes-dashboard-amd64:v1.10.0
在Master節點上執行:docker
[root@k8s-m ~]# curl -O kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.0/src/deploy/recommended/kubernetes-dashboard.yaml [root@k8s-m ~]# kubectl apply -f kubernetes-dashboard.yaml
查看pod是否建立成功:api
[root@k8s-m ~]# kubectl get pods --namespace=kube-system NAME READY STATUS RESTARTS AGE coredns-576cbf47c7-xg4xm 1/1 Running 1 72m coredns-576cbf47c7-xq9mc 1/1 Running 1 80m etcd-k8s-m 1/1 Running 2 79m kube-apiserver-k8s-m 1/1 Running 2 79m kube-controller-manager-k8s-m 1/1 Running 21 80m kube-flannel-ds-amd64-9fzm7 1/1 Running 1 72m kube-flannel-ds-amd64-nddqf 1/1 Running 2 72m kube-proxy-6js29 1/1 Running 2 80m kube-proxy-lp2v2 1/1 Running 2 72m kube-scheduler-k8s-m 1/1 Running 19 80m kubernetes-dashboard-77fd78f978-ngkvb 1/1 Running 1 25m
修改service配置,找到type,將ClusterIP改爲NodePort:瀏覽器
[root@k8s-m ~]# kubectl edit service kubernetes-dashboard --namespace=kube-system
查看暴露端口:bash
[root@k8s-m ~]# kubectl get service --namespace=kube-system NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE kube-dns ClusterIP 10.96.0.10 <none> 53/UDP,53/TCP 87m kubernetes-dashboard NodePort 10.101.204.129 <none> 443:31269/TCP 32m
建立kubernetes-dashboard用戶:網絡
kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: name: admin annotations: rbac.authorization.kubernetes.io/autoupdate: "true" roleRef: kind: ClusterRole name: cluster-admin apiGroup: rbac.authorization.k8s.io subjects: - kind: ServiceAccount name: admin namespace: kube-system --- apiVersion: v1 kind: ServiceAccount metadata: name: admin namespace: kube-system labels: kubernetes.io/cluster-service: "true" addonmanager.kubernetes.io/mode: Reconcile
建立用戶:app
[root@k8s-m ~]# kubectl create -f admin-token.yaml
獲取登陸token:curl
[root@k8s-m ~]# kubectl get secret -n kube-system |grep admin|awk '{print $1}' admin-token-6tkxm [root@k8s-m ~]# kubectl describe secret admin-token-6tkxm -n kube-system|grep '^token'|awk '{print $2}' eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi10b2tlbi02dGt4bSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJhZG1pbiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6IjQ4MjcxNTE5LTFkODgtMTFlOS1iMGZkLTAwMTU1ZDc0ZWUyNyIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDprdWJlLXN5c3RlbTphZG1pbiJ9.TpBGEd-7VXrYjN_5fi0sOXMqLIrhDkgqIVVTagO4wvKOQloCJkpfvnVgBJ0Oi52-UQNBKBVH8v1wRBltPHKrjMqVU9re6-y3nd4UbwWtIZzmfMJ_oRwo2ne_UdU_Ya2I5EOH3qh1cUIhdG3NpZYXwFICsNZURJWZM_U7OqJrZPuMXw4sfD6iGRWeMtOiAI8YN1LAfpj1RHaeOa66DK_LEsSLBsb2W6m7wrugk7SBCJSkMyec7ZVGLHo5Ha-X5wNO5qAAKzud0lz2KVcvwJW8lkcc9_lPxPIoDIpdCFEoG5xZHr0B2PkatCS8f31VQzP6LAmvkmHxbENb6V3Ov90RGw
將以上內容複製備用。ide
3.1 打開瀏覽器輸入訪問地址:<https://NodeIP:PORT>。此處輸入Node-2的訪問地址:<https://172.31.3.12:31269>,其餘節點亦如此。以下圖:
3.2 認證方式選擇口令,輸入剛纔獲取到的token,便可登錄成功。
3.3 登陸成功後,以下圖:
4.1 這是一個簡單而快樂的過程,只要動手去作,其實很簡單的!
4.2 此次實驗是部署在kubernetes v1.12.1的。
4.3 實驗使用的瀏覽器是Firefox v64.0.2,其餘瀏覽器可能不支持。