IT评测·应用市场-qidao123.com技术社区

标题: k8s dashboard可视化操作界面的安装 [打印本页]
作者: 我爱普洱茶    时间: 2024-12-29 00:43
标题: k8s dashboard可视化操作界面的安装
一、官方安装方法

根据官网的安装设置可以选择如下安装：
  1. kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0/aio/deploy/recommended.yaml
复制代码

二、添加阿里云加快举行安装

  1. #修改recommended.yaml拉取镜像的链接
  2. vim recommended.yaml
  4.           image: kubernetesui/dashboard:v2.0.0
  5.           image: kubernetesui/metrics-scraper:v1.0.4
  6.           #改为
  7.           image: registry.cn-hangzhou.aliyuncs.com/google_containers/dashboard:v2.7.0
  8.           image: registry.cn-hangzhou.aliyuncs.com/google_containers/metrics-scraper:v1.0.8
  10. #拉取镜像
  11. kubectl apply -f  recommended.yaml
复制代码
查看阿里云举行加快地址的方法：



查看pod 


三、访问dashboard

1、设置端口访问(把端口袒露到机器上方便外部访问)

（原理类似于docker -p）
  1. #设置端口访问
  2. kubectl edit svc kubernetes-dashboard -n kubernetes-dashboard
复制代码
 


2、验证端口设置是否乐成

  1. kubectl get svc -A | grep "kubernetes-dashboard"
复制代码


3、设置乐成后无法举行访问问题排查

  1. [root@master k8s]# kubectl logs -f -n  kubernetes-dashboard   kubernetes-dashboard-5fddc4fcc-j5cw8
  2. 2024/12/24 10:37:31 Using namespace: kubernetes-dashboard
  3. 2024/12/24 10:37:31 Using in-cluster config to connect to apiserver
  4. 2024/12/24 10:37:31 Starting overwatch
  5. 2024/12/24 10:37:31 Using secret token for csrf signing
  6. 2024/12/24 10:37:31 Initializing csrf token from kubernetes-dashboard-csrf secret
  7. panic: Get "https://10.96.0.1:443/api/v1/namespaces/kubernetes-dashboard/secrets/kubernetes-dashboard-csrf": dial tcp 10.96.0.1:443: i/o timeout
  9. goroutine 1 [running]:
  10. github.com/kubernetes/dashboard/src/app/backend/client/csrf.(*csrfTokenManager).init(0xc00056fae8)
  11.         /home/runner/work/dashboard/dashboard/src/app/backend/client/csrf/manager.go:41 +0x30e
  12. github.com/kubernetes/dashboard/src/app/backend/client/csrf.NewCsrfTokenManager(...)
  13.         /home/runner/work/dashboard/dashboard/src/app/backend/client/csrf/manager.go:66
  14. github.com/kubernetes/dashboard/src/app/backend/client.(*clientManager).initCSRFKey(0xc00019a080)
  15.         /home/runner/work/dashboard/dashboard/src/app/backend/client/manager.go:527 +0x94
  16. github.com/kubernetes/dashboard/src/app/backend/client.(*clientManager).init(0x19aba3a?)
  17.         /home/runner/work/dashboard/dashboard/src/app/backend/client/manager.go:495 +0x32
  18. github.com/kubernetes/dashboard/src/app/backend/client.NewClientManager(...)
  19.         /home/runner/work/dashboard/dashboard/src/app/backend/client/manager.go:594
  20. main.main()
  21.         /home/runner/work/dashboard/dashboard/src/app/backend/dashboard.go:96 +0x1cf
复制代码
 
​安装kubernetes-dashboard时显示为CrashLoopBackOff或Error状态的经过上边日记分析出现了网络冲突，进一步排查发现是初始化时的--pod-network-cidr=参数设置成和本机同一网段导致访问出现异常，需要重新初始化k8s集群，再重新搭建。
办理方法参考大神博客：


安装kubernetes-dashboard时显示为CrashLoopBackOff或Error状态的大概原因 - 岁月已走远 - 博客园

4、创建访问账号；天生token令牌用于访问dashboard

  1. #查看集群secret
  2. [root@master k8s]# kubectl get secret -n kubernetes-dashboard
  4. #查看token信息
  5. NAME                               TYPE                                  DATA   AGE
  6. default-token-cvk4b                kubernetes.io/service-account-token   3      44m
  7. kubernetes-dashboard-certs         Opaque                                0      44m
  8. kubernetes-dashboard-csrf          Opaque                                1      44m
  9. kubernetes-dashboard-key-holder    Opaque                                2      44m
  10. kubernetes-dashboard-token-bpgkb   kubernetes.io/service-account-token   3      44m
  12. [root@master k8s]# kubectl describe secret kubernetes-dashboard-token-bpgkb -n kubernetes-dashboard
  16. ...
  18. token:      eyJhbGciOiJSUzI1NiIsImtpZCI6Il95eExDMmIwYzQycHd5eG9mTTdwMEsxN0pqdVd4aGdxY2pRQzRXSEE5aWcifQ.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.ODXZxeWbX-yC_ttv4pu9ut_VmTVrHrS8rGO2dSCezm2BBlgh6JsCztByrzbIu7jnxagDQpEzu9SL1eL4BXYJWkjEOpmF6LxdkpTi5M7OMbVAQh2F3fKmjm6xPR_ORpobTsOztDfxK18BQBg4SMZJRZLxg7_3lvJ8wKbT7O1UVEb9goVMsQStZPV_QeuNy4GXsiq8OCyEHk3JufP6gKCNirMAskuOVIL_NI4bDCG6ZyRW5eYQswe1I6etixZvIEPyFyfK7j5DWld5W-mosoznWwUImAjEWOb5-JUywNu36vyXPd_zDqamqL3kjWJ0btuk5BccFukdSnfLwFPJs4POzQ
复制代码






5、API接口脚色权限设置
k8s接纳的是基于脚色的访问控制策略，Role-Based Access Control, 即”RBAC”，利用”rbac.authorization.k8s.io” API Group实现授权决议，涉及到ServiceAccount，Role，ClusterRole，RoleBinding，ClusterRoleBinding，Secret等概念，实行如下命令办理：
  1. kubectl create clusterrolebinding serviceaccount-cluster-admin --clusterrole=cluster-admin --user=system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard
复制代码

 

选择All-namespaces


免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！更多信息从访问主页：qidao123.com:ToB企服之家，中国第一个企服评测及商务社交产业平台。



欢迎光临 IT评测·应用市场-qidao123.com技术社区 (https://dis.qidao123.com/) Powered by Discuz! X3.4