kubernetst Dashboard安装

下载yaml文件

$ wget  https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml

修改镜像地址

ccr.ccs.tencentyun.com/cl0411/kubernetes-dashboard-amd64:v1.10.1

kubectl apply -f kubernetes-dashboard.yaml

发布为Node Port

kubectl patch svc kubernetes-dashboard -p '{"spec":{"type":"NodePort"}}' -n kube-system

方式1： 使用token登录

创建sa及绑定

kubectl create sa mysa -n kube-system 
创建一个角色该角色只有读和查看pod的权限
kubectl create role pod-reader --verb=get --verb=list --verb=watch --resource=pods -n default
绑定这个角色
kubectl create rolebinding cc0411 --role=pod-reader --serviceaccount=kube-system:mysa

查看token

kubectl -n kube-system describe secret $(kubectl -n kube-system get secret  grep mysa  awk '{print $1}')

把获取到的token粘贴到daahboard访问页面即可访问dashboard

方式2：使用kubeconfig访问

获取解码的token

token=$(kubectl -n kube-system get secret $(kubectl -n kube-system get secret  grep mysa  awk '{print $1}') -o jsonpath={.data.token}base64 -d)

生成kubeconfig文件，证书使用前面安装k8s的ca

kubectl config set-cluster kubernetes --certificate-authority=ca.pem --embed-certs=true --server=https://192.168.57.13:6443 --kubeconfig=cc0411.kubeconfig
kubectl config set-credentials cc0411 --token=$token --kubeconfig=cc0411.kubeconfig 
kubectl config set-context cc0411@kubernetes --cluster=kubernetes --user=cc0411 --kubeconfig=cc0411.kubeconfig 
kubectl config use-context cc0411@kubernetes --kubeconfig=cc0411.kubeconfig

把生成的kubeconfig文件导出到页面登录选择该文件

下面的绑定系统内置角色cluster-admin和admin 权限比较大

kubectl create clusterrolebinding cc0411 --clusterrole=cluster-admin --serviceaccount=kube-system:mysa
kubectl create clusterrolebinding cc0411 --clusterrole=admin --serviceaccount=kube-system:mysa