安裝kubernetes Dashboard · sg-exam

## 安裝kubernetes-dashboard 默認情況下不會部署kubernetes-dashboard ### 下載yaml文件 ~~~ $ wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.4.0/aio/deploy/recommended.yaml ~~~ ### 修改配置默認Dashboard只能集群內部訪問，修改Service為NodePort類型，暴露到外部30001端口 ![](https://img.kancloud.cn/a1/c8/a1c89fd755e8a12542a97e9985f92d19_828x634.png) 手動pull鏡像 ~~~ $ docker pull kubernetesui/dashboard:v2.4.0 $ docker pull kubernetesui/metrics-scraper:v1.0.7 $ kubectl apply -f recommended.yaml $ kubectl get pods -n kubernetes-dashboard $ kubectl get pods,svc -n kubernetes-dashboard ~~~ ![](https://img.kancloud.cn/09/b2/09b2855798489aa9b0b09abccf3a48be_1496x656.png) ### 訪問kubernetes dashboard 訪問：[https://ip:30001](https://ip:30001/) ### 登錄有兩種方式登錄，使用token或者kubeconfig登錄下面使用token方式登錄創建service account并綁定默認cluster-admin管理員集群角色 ~~~ $ kubectl create serviceaccount dashboard-admin -n kubernetes-dashboard $ kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:dashboard-admin $ kubectl describe secrets -n kubernetes-dashboard $(kubectl -n kubernetes-dashboard get secret | awk '/dashboard-admin/{print $1}') ~~~ ![](https://img.kancloud.cn/67/45/67458033729cfba1cf43a9e9ae3b9d48_2368x386.png) 使用輸出的token登錄即可 ![](https://img.kancloud.cn/e8/74/e874aa9cf3f5f15b4fbd9bb58e45a29e_2778x930.png) 登錄成功 ![](https://img.kancloud.cn/4e/09/4e09c637eb7d998681530248767f0b65_2848x1372.png)