From e70b94d812a50c9244269f0af01e79cc92c9bda9 Mon Sep 17 00:00:00 2001 From: wxin <15253413025@163.com> Date: Sat, 17 May 2025 14:29:18 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20kubernetes-DashBoard.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- kubernetes-DashBoard.md | 258 ++++++++++++++++++++-------------------- 1 file changed, 129 insertions(+), 129 deletions(-) diff --git a/kubernetes-DashBoard.md b/kubernetes-DashBoard.md index 58c3035..bb87f24 100644 --- a/kubernetes-DashBoard.md +++ b/kubernetes-DashBoard.md @@ -1,130 +1,130 @@ -

kubernetes DashBoard

- ------- - -## 一：DashBoard - -之前在kubernetes中完成的所有操作都是通过命令行工具kubectl完成的。其实，为了提供更丰富的用户体验，kubernetes还开发了一个基于web的用户界面（Dashboard）。用户可以使用Dashboard部署容器化的应用，还可以监控应用的状态，执行故障排查以及管理kubernetes中各种资源。 - -### 1. 部署Dashboard - -**下载yaml，并运行Dashboard** - -```bash -# 下载yaml -[root@master ~]# wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yaml - -# 修改kubernetes-dashboard的Service类型 -[root@master ~]# vim recommended.yaml -kind: Service -apiVersion: v1 -metadata: - labels: - k8s-app: kubernetes-dashboard - name: kubernetes-dashboard - namespace: kubernetes-dashboard -spec: - type: NodePort - ports: - - port: 443 - targetPort: 8443 - nodePort: 30001 - selector: - k8s-app: kubernetes-dashboard - -# 部署 -[root@master ~]# kubectl create -f recommended.yaml - -# 查看namespace下的kubernetes-dashboard下的资源 -[root@master ~]# kubectl get pods,svc -n kubernetes-dashboard -NAME READY STATUS RESTARTS AGE -pod/dashboard-metrics-scraper-799d786dbf-rqftt 1/1 Running 0 7m46s -pod/kubernetes-dashboard-fb8648fd9-wmqwv 1/1 Running 0 7m46s - -NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE -service/dashboard-metrics-scraper ClusterIP 10.108.205.40 8000/TCP 7m46s -service/kubernetes-dashboard NodePort 10.102.51.227 443:30001/TCP 7m46s -``` - -**创建访问账户，获取token** - -```bash -# 创建账号 -[root@master ~]# kubectl create serviceaccount dashboard-admin -n kubernetes-dashboard -serviceaccount/dashboard-admin created - -# 授权 -[root@master ~]# kubectl create clusterrolebinding dashboard-admin-rb --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:dashboard-admin -clusterrolebinding.rbac.authorization.k8s.io/dashboard-admin-rb created - -# 获取账号token -[root@master ~]# kubectl get secrets -n kubernetes-dashboard | grep dashboard-admin -dashboard-admin-token-w49cf kubernetes.io/service-account-token 3 13s - -[root@master ~]# kubectl describe secrets dashboard-admin-token-w49cf -n kubernetes-dashboard -Name: dashboard-admin-token-w49cf -Namespace: kubernetes-dashboard -Labels: -Annotations: kubernetes.io/service-account.name: dashboard-admin - kubernetes.io/service-account.uid: 97f46627-fdc0-4379-8588-cf18f697e623 - -Type: kubernetes.io/service-account-token - -Data -==== -namespace: 20 bytes -token: eyJhbGciOiJSUzI1NiIsImtpZCI6InNQU3pOVFpLVmlwVHM3em5vZUV3S2xTbGZmc3g4M3BhTlZiTGExdlRkZTgifQ.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.bL6DuuI9j0Hn2WUaMgrzqxrPVHJuhNXBMAD-enK-SN_--hFh7zXVQLbU63caR6wCtPh5xjpWMm6jiKPu5oAeUZcumJbgpnTk6aYiRGu3h8i_IN_mrUdCsgu4ux_AeZuoj3gu83aMoHoG9GRZi--0TOJYeRm6lGToNMad_vXPBvCnZmgV9QDRdmjBtLt4cfz816PIWdLC0-36R4QnVWNVGqyEkeTnqYYWQIlL13hmbUfGaz7ZnkxYLnFO6uvKd9DSrb7jU9hzLY_MoOST11G-BUzcGaiGutgrbGobMGBKzB2vFLuKswxwyXQcshPxkWw3ieg8x7_WLGt-V7E2G2x0tw -ca.crt: 1099 bytes -``` - -⚠️ **浏览器安全警告处理**： - -- 如果是自签名证书，浏览器会阻止访问。 -- **临时解决方案**：在页面任意位置输入 `thisisunsafe`（Chrome/Edge 有效）。 -- **长期方案**：将集群的 CA 证书导入系统信任库。 - -**通过浏览器访问Dashboard的UI** - -在登录页面上输入上面的token - -![](accents\images-202505130040.png) - -出现下面的页面代表成功 - -![](accents\images-202505130041.png) - -### 2. 使用Dashboard - -本章节以Deployment为例演示DashBoard的使用 - -**查看** - -选择指定的命名空间dev，然后点击Deployments，查看dev空间下的所有deployment - -![](accents\images-202505150047.png) - -**扩缩容** - -在Deployment上点击缩放，然后指定目标副本数量，点击确定 - -![](accents\images-202505150048.png) - -![](accents\images-202505150049.png) - -**编辑** - -在Deployment上点击编辑，然后修改yaml文件，点击确定 - -![](accents\images-202505150050.png) - -![](accents\images-202505150051.png) - -**查看Pod** - -点击Pods, 查看pods列表 - -![](accents\images-202505150052.png) - -**操作Pod** - +

kubernetes DashBoard

+ +------ + +## 一：DashBoard + +之前在kubernetes中完成的所有操作都是通过命令行工具kubectl完成的。其实，为了提供更丰富的用户体验，kubernetes还开发了一个基于web的用户界面（Dashboard）。用户可以使用Dashboard部署容器化的应用，还可以监控应用的状态，执行故障排查以及管理kubernetes中各种资源。 + +### 1. 部署Dashboard + +**下载yaml，并运行Dashboard** + +```bash +# 下载yaml +[root@master ~]# wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yaml + +# 修改kubernetes-dashboard的Service类型 +[root@master ~]# vim recommended.yaml +kind: Service +apiVersion: v1 +metadata: + labels: + k8s-app: kubernetes-dashboard + name: kubernetes-dashboard + namespace: kubernetes-dashboard +spec: + type: NodePort + ports: + - port: 443 + targetPort: 8443 + nodePort: 30001 + selector: + k8s-app: kubernetes-dashboard + +# 部署 +[root@master ~]# kubectl create -f recommended.yaml + +# 查看namespace下的kubernetes-dashboard下的资源 +[root@master ~]# kubectl get pods,svc -n kubernetes-dashboard +NAME READY STATUS RESTARTS AGE +pod/dashboard-metrics-scraper-799d786dbf-rqftt 1/1 Running 0 7m46s +pod/kubernetes-dashboard-fb8648fd9-wmqwv 1/1 Running 0 7m46s + +NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE +service/dashboard-metrics-scraper ClusterIP 10.108.205.40 8000/TCP 7m46s +service/kubernetes-dashboard NodePort 10.102.51.227 443:30001/TCP 7m46s +``` + +**创建访问账户，获取token** + +```bash +# 创建账号 +[root@master ~]# kubectl create serviceaccount dashboard-admin -n kubernetes-dashboard +serviceaccount/dashboard-admin created + +# 授权 +[root@master ~]# kubectl create clusterrolebinding dashboard-admin-rb --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:dashboard-admin +clusterrolebinding.rbac.authorization.k8s.io/dashboard-admin-rb created + +# 获取账号token +[root@master ~]# kubectl get secrets -n kubernetes-dashboard | grep dashboard-admin +dashboard-admin-token-w49cf kubernetes.io/service-account-token 3 13s + +[root@master ~]# kubectl describe secrets dashboard-admin-token-w49cf -n kubernetes-dashboard +Name: dashboard-admin-token-w49cf +Namespace: kubernetes-dashboard +Labels: +Annotations: kubernetes.io/service-account.name: dashboard-admin + kubernetes.io/service-account.uid: 97f46627-fdc0-4379-8588-cf18f697e623 + +Type: kubernetes.io/service-account-token + +Data +==== +namespace: 20 bytes +token: eyJhbGciOiJSUzI1NiIsImtpZCI6InNQU3pOVFpLVmlwVHM3em5vZUV3S2xTbGZmc3g4M3BhTlZiTGExdlRkZTgifQ.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.bL6DuuI9j0Hn2WUaMgrzqxrPVHJuhNXBMAD-enK-SN_--hFh7zXVQLbU63caR6wCtPh5xjpWMm6jiKPu5oAeUZcumJbgpnTk6aYiRGu3h8i_IN_mrUdCsgu4ux_AeZuoj3gu83aMoHoG9GRZi--0TOJYeRm6lGToNMad_vXPBvCnZmgV9QDRdmjBtLt4cfz816PIWdLC0-36R4QnVWNVGqyEkeTnqYYWQIlL13hmbUfGaz7ZnkxYLnFO6uvKd9DSrb7jU9hzLY_MoOST11G-BUzcGaiGutgrbGobMGBKzB2vFLuKswxwyXQcshPxkWw3ieg8x7_WLGt-V7E2G2x0tw +ca.crt: 1099 bytes +``` + +⚠️ **浏览器安全警告处理**： + +- 如果是自签名证书，浏览器会阻止访问。 +- **临时解决方案**：在页面任意位置输入 `thisisunsafe`（Chrome/Edge 有效）。 +- **长期方案**：将集群的 CA 证书导入系统信任库。 + +**通过浏览器访问Dashboard的UI** + +在登录页面上输入上面的token + +![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202505130040.png) + +出现下面的页面代表成功 + +![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202505130041.png) + +### 2. 使用Dashboard + +本章节以Deployment为例演示DashBoard的使用 + +**查看** + +选择指定的命名空间dev，然后点击Deployments，查看dev空间下的所有deployment + +![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202505150047.png) + +**扩缩容** + +在Deployment上点击缩放，然后指定目标副本数量，点击确定 + +![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202505150048.png) + +![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202505150049.png) + +**编辑** + +在Deployment上点击编辑，然后修改yaml文件，点击确定 + +![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202505150050.png) + +![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202505150051.png) + +**查看Pod** + +点击Pods, 查看pods列表 + +![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202505150052.png) + +**操作Pod** + 选中某个Pod，可以对其执行日志（logs）、进入执行（exec）、编辑、删除操作 \ No newline at end of file