Kubernetes 1.8.4 中如何安裝Dashboard

小編給大家分享一下Kubernetes 1.8.4 中如何安裝Dashboard，希望大家閱讀完這篇文章之后都有所收獲，下面讓我們一起去探討吧！

Dashboard

      Dashboard 是 Kubernetes 社區官方開發的儀表板，有了儀表板后管理者就能夠透過 Web-based 方式來管理 Kubernetes 集群，除了提升管理方便，也讓資源可視化，讓人更直覺看見系統信息的呈現結果。

• 建立kubernetes-dashboard-certs，來提供給 Dashboard TLS 使用

  mkdir -p /etc/kubernetes/addons/certs && cd /etc/kubernetes/addons
  openssl genrsa -des3 -passout pass:x -out certs/dashboard.pass.key 2048
  openssl rsa -passin pass:x -in certs/dashboard.pass.key -out certs/dashboard.key
  openssl req -new -key certs/dashboard.key -out certs/dashboard.csr -subj '/CN=kube-dashboard'
  openssl x509 -req -sha256 -days 365 -in certs/dashboard.csr -signkey certs/dashboard.key -out certs/dashboard.crt
  rm certs/dashboard.pass.key
  kubectl create secret generic kubernetes-dashboard-certs\
      --from-file=certs -n kube-system

  
  

   

• 在master通過 kubectl 來建立 kubernetes dashboard 即可

  cat <<EOF >  kube-dashboard.yml
  # Copyright 2017 The Kubernetes Authors.
  #
  # Licensed under the Apache License, Version 2.0 (the "License");
  # you may not use this file except in compliance with the License.
  # You may obtain a copy of the License at
  #
  #     http://www.apache.org/licenses/LICENSE-2.0
  #
  # Unless required by applicable law or agreed to in writing, software
  # distributed under the License is distributed on an "AS IS" BASIS,
  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  # See the License for the specific language governing permissions and
  # limitations under the License.
  
  # Configuration to deploy release version of the Dashboard UI compatible with
  # Kubernetes 1.8.
  #
  # Example usage: kubectl create -f <this_file>
  
  # ------------------- Dashboard Secret ------------------- #
  
  apiVersion: v1
  kind: Secret
  metadata:
    labels:
      k8s-app: kubernetes-dashboard
    name: kubernetes-dashboard-certs
    namespace: kube-system
  type: Opaque
  
  ---
  # ------------------- Dashboard Service Account ------------------- #
  
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    labels:
      k8s-app: kubernetes-dashboard
    name: kubernetes-dashboard
    namespace: kube-system
  
  ---
  # ------------------- Dashboard Role & Role Binding ------------------- #
  
      
  kind: Role
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: kubernetes-dashboard-minimal
    namespace: kube-system
  rules:
    # Allow Dashboard to create 'kubernetes-dashboard-key-holder' secret.
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["create"]
    # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
  - apiGroups: [""]
    resources: ["secrets"]
    resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs"]
    verbs: ["get", "update", "delete"]
    # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
  - apiGroups: [""]
    resources: ["configmaps"]
    resourceNames: ["kubernetes-dashboard-settings"]
    verbs: ["get", "update"]
    # Allow Dashboard to get metrics from heapster.
  - apiGroups: [""]
    resources: ["services"]
    resourceNames: ["heapster"]
    verbs: ["proxy"]
  
  ---
  apiVersion: rbac.authorization.k8s.io/v1
  kind: RoleBinding
  metadata:
    name: kubernetes-dashboard-minimal
    namespace: kube-system
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: Role
    name: kubernetes-dashboard-minimal
  subjects:
  - kind: ServiceAccount
    name: kubernetes-dashboard
    namespace: kube-system
  
  ---
  # ------------------- Dashboard Deployment ------------------- #
  
  kind: Deployment
  apiVersion: apps/v1beta2
  metadata:
    labels:
      k8s-app: kubernetes-dashboard
    name: kubernetes-dashboard
    namespace: kube-system
  spec:
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        k8s-app: kubernetes-dashboard
    template:
      metadata:
        labels:
          k8s-app: kubernetes-dashboard
      spec:
        containers:
        - name: kubernetes-dashboard
          image: registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.8.0
          imagePullPolicy: IfNotPresent
          ports:
          - containerPort: 8443
            protocol: TCP
          args:
            - --tls-key-file=dashboard.key
            - --tls-cert-file=dashboard.crt
            #- --auto-generate-certificates
            # Uncomment the following line to manually specify Kubernetes API server Host
            # If not specified, Dashboard will attempt to auto discover the API server and connect
            # to it. Uncomment only if the default does not work.
            # - --apiserver-host=http://my-address:port
          volumeMounts:
          - name: kubernetes-dashboard-certs
            mountPath: /certs
            # Create on-disk volume to store exec logs
          - mountPath: /tmp
            name: tmp-volume
          livenessProbe:
            httpGet:
              scheme: HTTPS
              path: /
              port: 8443
            initialDelaySeconds: 30
            timeoutSeconds: 30
        volumes:
        - name: kubernetes-dashboard-certs
          secret:
            secretName: kubernetes-dashboard-certs
        - name: tmp-volume
          emptyDir: {}
        serviceAccountName: kubernetes-dashboard
        # Comment the following tolerations if Dashboard must not be deployed on master
        tolerations:
        - key: node-role.kubernetes.io/master
          effect: NoSchedule
  
  ---
  # ------------------- Dashboard Service ------------------- #
  
  kind: Service
  apiVersion: v1
  metadata:
    labels:
      k8s-app: kubernetes-dashboard
    name: kubernetes-dashboard
    namespace: kube-system
  spec:
    ports:
      - port: 443
        targetPort: 8443
    selector:
      k8s-app: kubernetes-dashboard
  EOF

  
  

  kubectl apply -f kube-dashboard.yml

  
  

  cat <<EOF >kube-dashboard-admin.yml
  apiVersion: rbac.authorization.k8s.io/v1beta1  
  kind: ClusterRoleBinding  
  metadata:  
    name: kubernetes-dashboard  
    labels:  
      k8s-app: kubernetes-dashboard  
  roleRef:  
    apiGroup: rbac.authorization.k8s.io  
    kind: ClusterRole  
    name: cluster-admin  
  subjects:  
  - kind: ServiceAccount  
    name: kubernetes-dashboard  
    namespace: kube-system  
  EOF

  
  

  kubectl apply -f kube-dashboard-admin.yml

  
  

  kubectl -n kube-system get po,svc -l k8s-app=kubernetes-dashboard

  
  

  完成后，就可以透過瀏覽器訪問 Dashboard

  https://10.0.0.162:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/

看完了這篇文章，相信你對“Kubernetes 1.8.4 中如何安裝Dashboard”有了一定的了解，如果想了解更多相關知識，歡迎關注億速云行業資訊頻道，感謝各位的閱讀！