前言
之前在kubernetes中完成的所有操作都是通过命令行工具kubectl完成的。其实,为了提供更丰富的用户体验,kubernetes还开发了一个基于web的用户界面(Dashboard)。用户可以使用Dashboard部署容器化的应用,还可以监控应用的状态,执行故障排查以及管理kubernetes中各种资源。
k8s管理界面
这里主要列举以下3个:
- 官方的kubernetes-dashboard
- Rancher
- Kuboard
部署Dashboard
- 下载yaml,并运行Dashboard
# 下载yaml
[root@master ~]# wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0/aio/deploy/recommended.yaml
# 修改kubernetes-dashboard的Service类型
kind: Service
apiVersion: v1
metadata:
labels:
k8s-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kubernetes-dashboard
spec:
type: NodePort # 新增
ports:
- port: 443
targetPort: 8443
nodePort: 30009 # 新增
selector:
k8s-app: kubernetes-dashboard
# 部署
[root@master ~]# kubectl create -f recommended.yaml
# 查看namespace下的kubernetes-dashboard下的资源
[root@master ~]# kubectl get pod,svc -n kubernetes-dashboard
NAME READY STATUS RESTARTS AGE
pod/dashboard-metrics-scraper-c79c65bb7-tqjfc 1/1 Running 0 9s
pod/kubernetes-dashboard-56484d4c5-7zr99 0/1 ContainerCreating 0 9s
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
service/dashboard-metrics-scraper ClusterIP 10.106.110.241 <none> 8000/TCP 9s
service/kubernetes-dashboard NodePort 10.102.61.36 <none> 443:30009/TCP 9s
2)创建访问账户,获取token
# 创建账号
[root@master ~]# kubectl create serviceaccount dashboard-admin -n kubernetes-dashboard
serviceaccount/dashboard-admin created
# 授权
[root@master ~]# kubectl create clusterrolebinding dashboard-admin-rb --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:dashboard-admin
clusterrolebinding.rbac.authorization.k8s.io/dashboard-admin-rb created
# 获取账号token
[root@master ~]# kubectl get secrets -n kubernetes-dashboard | grep dashboard-admin
dashboard-admin-token-zgfsk kubernetes.io/service-account-token 3 65s
[root@master ~]# kubectl describe secrets dashboard-admin-token-zgfsk -n kubernetes-dashboard
Name: dashboard-admin-token-zgfsk
Namespace: kubernetes-dashboard
Labels: <none>
Annotations: kubernetes.io/service-account.name: dashboard-admin
kubernetes.io/service-account.uid: f5cfc9d5-902e-418a-b12f-d74d73e510aa
Type: kubernetes.io/service-account-token
Data
====
ca.crt: 1025 bytes
namespace: 20 bytes
token: eyJhbGciOiJSUzI1NiIsImtpZCI6IjM2eFk5WjNQZDYtZkFWQ2w5cWhONjBhVm5PYnFJS1cyV3JsS2czOU1XSEkifQ.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.H22cykLA6aOIrQaAdIdPMqqGjD4LwKw9DFIkFxJz0EUcU8GLrjon_kzxb-1JM8HY0PFrbchnEnCWZp1sOTPD5JibLh6-BpYAOR6OHYyaQKVAw9BVqKIWe7EkFQvKoah52CCEdOEN4NFdX-8m_rRWxRlJajN_NrzbVW1t1SbuVomRlxcZfDaMNsN4i1FEL08vl0ku171H50BpmC0L-PaGM-B9a2haz91uafCeWv51cPrmuYB6UCbDALZfFTcLSlje2IGuIjv408_EF8u3bfLmfTgwr3UDK6QHD1mCoyPNjwMNIVyUmnCS_4CiRZNSzCqkttJP8LCDWTsVRXKpSxgvCw
3)通过浏览器访问Dashboard的UI
在登录页面上输入上面的token
出现下面的页面代表成功
使用DashBoard
这里以以Deployment为例演示DashBoard的使用
创建
查看
选择指定的命名空间dev
,然后点击Deployments
,查看dev空间下的所有deployment
扩缩容
在Deployment
上点击规模
,然后指定目标副本数量
,点击确定
编辑
在Deployment
上点击编辑
,然后修改yaml文件
,点击确定
查看Pod
点击Pods
, 查看pods列表
操作Pod
选中某个Pod,可以对其执行日志(logs)、进入执行(exec)、编辑、删除操作
Dashboard提供了kubectl的绝大部分功能,这里不再一一演示
Kuboard Kubernetes安装
https://kuboard.cn/install/v3/install.html
https://www.cnblogs.com/xiao987334176/p/12060855.html
https://blog.csdn.net/han949417140/article/details/105858255