一、环境准备
实验环境使用 kubernetes v1.27.4 Centos8 && Centos7
yum install -y vim wget
经过测试,清华大学镜像下载速度稳定快速,可供国内用户便捷使用。首先我们需要配置清华大学的EPEL安装源。具体步骤如下:
dnf -y install wget
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-8.repo
yum clean all
yum makecache
yum -y update
Kubernetes-Dashboard安装
下载地址:参考 Kubernetes-Dashboard
mkdir -p /etc/kubernetes/dashboard
cd /etc/kubernetes/dashboard
wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
修改文件,增加nodeport参数便于访问
vim recommended.yaml
如下:
# Adde by How
type: NodePort
-----------------------------------------------------------------------------------
kind: Service
apiVersion: v1
metadata:
labels:
k8s-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kubernetes-dashboard
spec:
type: NodePort
ports:
- port: 443
targetPort: 8443
nodePort: 32641 #指定nodePort,这样当集群重启时端口不会变更了。
selector:
k8s-app: kubernetes-dashboard
执行安装
[root@master01 tools]# wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
[root@master01 tools]# kubectl apply -f recommended.yaml
-------------------output------------------------------------------------
namespace/kubernetes-dashboard created
serviceaccount/kubernetes-dashboard created
service/kubernetes-dashboard created
secret/kubernetes-dashboard-certs created
secret/kubernetes-dashboard-csrf created
secret/kubernetes-dashboard-key-holder created
configmap/kubernetes-dashboard-settings created
role.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrole.rbac.authorization.k8s.io/kubernetes-dashboard created
rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created
deployment.apps/kubernetes-dashboard created
service/dashboard-metrics-scraper created
deployment.apps/dashboard-metrics-scraper created
查看服务是否正常运行,以及自动选择的nodeport端口
# kubectl -n kubernetes-dashboard get pod Sat Aug 12 14:39:42 2023
NAME READY STATUS RESTARTS AGE
dashboard-metrics-scraper-5cb4f4bb9c-4gtjc 1/1 Running 0 70m
kubernetes-dashboard-6967859bff-j26lp 1/1 Running 0 70m
-----------------------------------------------------------------------------------
[root@master01 tools]# kubectl -n kubernetes-dashboard get service kubernetes-dashboard
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes-dashboard NodePort 10.106.206.69 <none> 443:32641/TCP 71m
用浏览器访问控制台
访问 https://192.168.199.10:32641 即可进入控制台界面
注意:Chrome如果提示不安全连接,并且高级选项也无法进入, 在页面空白处键入 thisisunsafe 即可
访问控制
有好几种方式,这里只选择了token方式
创建管理员用户
1. 创建管理员服务帐号
首先创建一个叫admin-user的服务账号,并放在kubernetes-dashboard名称空间下:
mkdir -p /etc/kubernetes/dashboard
cd /etc/kubernetes/dashboard
vim admin-user.yaml
如下
apiVersion: v1
kind: ServiceAccount
metadata:
name: admin-user
namespace: kubernetes-dashboard
kubectl apply -f admin-user.yaml
2. 绑定管理员集群角色
默认情况下,kubeadm创建集群时已经创建了cluster-admin角色,我们直接绑定即可
cd /etc/kubernetes/dashboard
vim admin-user-role-binding.yaml
如下
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: admin-user
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: admin-user
namespace: kubernetes-dashboard
执行此配置
kubectl apply -f admin-user-role-binding.yaml
3. 创建管理员Token
现在我们创建admin-user用户的Token,以便用来登录dashboard:
cd /etc/kubernetes/dashboard
kubectl -n kubernetes-dashboard create token admin-user
-------------------------------------------------------
此处略
4. 用管理员token登陆
把Token复制到登录界面的Token输入框中登陆 https://192.168.199.10:32641 正常登陆
5.Kubernetes Dashboard token失效时间设置
Dashboard的Token失效时间可以通过 token-ttl 参数来设置,这里我们有三种方式:【yaml、直接修改、通过Kubernetes Dashboard 】文章来源:https://www.toymoban.com/news/detail-644071.html
我们这边通过kubectl 直接修改文章来源地址https://www.toymoban.com/news/detail-644071.html
#kubectl edit deployment kubernetes-dashboard -n kube-system
------------------------------------------------
spec:
containers:
- args:
- --auto-generate-certificates
- --token-ttl=43200
- --namespace=kubernetes-dashboard
image: kubernetesui/dashboard:v2.7.0
imagePullPolicy: Always
livenessProbe:
failureThreshold: 3
httpGet:
path: /
port: 8443
scheme: HTTPS
initialDelaySeconds: 30
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 30
name: kubernetes-dashboard
ports:
到了这里,关于Kubernetes 1.27.4 安装部署详细教程的文章就介绍完了。如果您还想了解更多内容,请在右上角搜索TOY模板网以前的文章或继续浏览下面的相关文章,希望大家以后多多支持TOY模板网!