K3s Kubernetes 儀表盤

Kubernetes 儀表盤

本安裝指南將幫助您在 K3s 上部署和配置Kubernetes 儀表盤。

部署 Kubernetes 儀表盤

GITHUB_URL=https://github.com/kubernetes/dashboard/releases
VERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')
sudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml

儀表盤 RBAC 配置

重要： 本指南中創(chuàng)建的 ?admin-user? 將在儀表盤中擁有管理權(quán)限。

創(chuàng)建以下資源清單文件：

?dashboard.admin-user.yml?

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard

?dashboard.admin-user-role.yml ?

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
  - kind: ServiceAccount
    name: admin-user
    namespace: kubernetes-dashboard

部署 ?admin-user? 配置：

sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml

獲得 Bearer Token

v1.24+

sudo k3s kubectl -n kubernetes-dashboard create token admin-user

v1.23 及之前的版本

sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'

本地訪問儀表盤

要訪問儀表盤，你必須創(chuàng)建一個(gè)安全通道到你的 K3s 集群。

sudo k3s kubectl proxy

現(xiàn)在可以通過以下網(wǎng)址訪問儀表盤：

• ?http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/ ?
• 使用 ?admin-user? Bearer Token ?Sign In?

高級(jí)：遠(yuǎn)程訪問儀表盤

請(qǐng)參閱儀表盤文檔。使用端口轉(zhuǎn)發(fā)來訪問集群中的應(yīng)用程序。

升級(jí)儀表盤

sudo k3s kubectl delete ns kubernetes-dashboard
GITHUB_URL=https://github.com/kubernetes/dashboard/releases
VERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')
sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml

刪除儀表盤和 admin-user 配置

sudo k3s kubectl delete ns kubernetes-dashboard
sudo k3s kubectl delete clusterrolebinding kubernetes-dashboard
sudo k3s kubectl delete clusterrole kubernetes-dashboard