K8s第八篇Kubernetes-Dashboard

Kubernetes-Dashboard

Kubernetes Dashboard就是k8s集群的WEBUI，集合了所有命令行可以操作的所有命令。

Kubernetes Dashboard功能：

部署容器化的应用。
监控应用的状态。
执行故障排查任务。
管理Kubernetes各种资源。
监控集群节点的硬件资源状态。

Github：https://github.com/kubernetes/dashboard

部署Kubernetes-Dashboard：

k8smatser：

[root@k8smaster kubernetes-dashboard]# wget  https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml
--2020-01-02 14:39:49--  http://et/
Resolving et (et)... failed: Name or service not known.
wget: unable to resolve host address ‘et’
--2020-01-02 14:39:49--  https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.108.133
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.108.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4577 (4.5K) [text/plain]
Saving to: ‘kubernetes-dashboard.yaml’100%[=================================================================================================>] 4,577       --.-K/s   in 0s      2020-01-02 14:39:50 (65.7 MB/s) - ‘kubernetes-dashboard.yaml’ saved [4577/4577]FINISHED --2020-01-02 14:39:50--
Total wall clock time: 1.3s
Downloaded: 1 files, 4.5K in 0s (65.7 MB/s)
[root@k8smaster kubernetes-dashboard]# ls
kubernetes-dashboard.yaml
[root@k8smaster kubernetes-dashboard]# ls
kubernetes-dashboard.yaml
[root@k8smaster kubernetes-dashboard]# kubectl apply -f kubernetes-dashboard.yaml 
secret/kubernetes-dashboard-certs created
serviceaccount/kubernetes-dashboard created
role.rbac.authorization.k8s.io/kubernetes-dashboard-minimal created
rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard-minimal created
deployment.apps/kubernetes-dashboard created
service/kubernetes-dashboard created
[root@k8smaster kubernetes-dashboard]# kubectl patch svc kubernetes-dashboard -n kube-system -p '{"spec":{"type":"NodePort"}}' 
service/kubernetes-dashboard patched
[root@k8smaster kubernetes-dashboard]# kubectl get svc -n kube-system
NAME                      TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                  AGE
kube-dns                  ClusterIP   10.96.0.10       <none>        53/UDP,53/TCP,9153/TCP   65d
kubernetes-dashboard      NodePort    10.104.129.230   <none>        443:30152/TCP            2m13s
traefik-ingress-service   ClusterIP   10.102.130.108   <none>        80/TCP,8080/TCP          16d
traefik-web-ui            ClusterIP   10.98.71.71      <none>        80/TCP                   16d

#镜像下载失败，使用阿里云的镜像源。
[root@k8smaster kubernetes-dashboard]# docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
v1.10.1: Pulling from google_containers/kubernetes-dashboard-amd64
9518d8afb433: Pull complete 
Digest: sha256:0ae6b69432e78069c5ce2bcde0fe409c5c4d6f0f4d9cd50a17974fea38898747
Status: Downloaded newer image for registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
[root@k8smaster kubernetes-dashboard]# docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1  k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.1

k8snode1：

[root@k8snode1 kubernetes-dashboard]# docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
v1.10.1: Pulling from google_containers/kubernetes-dashboard-amd64
9518d8afb433: Pull complete 
Digest: sha256:0ae6b69432e78069c5ce2bcde0fe409c5c4d6f0f4d9cd50a17974fea38898747
Status: Downloaded newer image for registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
[root@k8snode1 kubernetes-dashboard]# docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1  k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.1

k8snode2：

[root@k8snode2 kubernetes-dashboard]# docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
v1.10.1: Pulling from google_containers/kubernetes-dashboard-amd64
9518d8afb433: Pull complete 
Digest: sha256:0ae6b69432e78069c5ce2bcde0fe409c5c4d6f0f4d9cd50a17974fea38898747
Status: Downloaded newer image for registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1
[root@k8snode2 kubernetes-dashboard]# docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64:v1.10.1  k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.1

自建证书（默认的证书有问题，气死了！！！）

k8smatser：

[root@k8smaster kubernetes-dashboard]# mkdir tls
[root@k8smaster kubernetes-dashboard]# cd tls/
[root@k8smaster tls]# openssl genrsa -out ca.key 2048
Generating RSA private key, 2048 bit long modulus
...............................+++
....................................................+++
e is 65537 (0x10001)
[root@k8smaster tls]# openssl req -new -x509 -key ca.key -out ca.crt -days 3650 -subj "/C=CN/ST=HB/L=WH/O=DM/OU=YPT/CN=CA"
[root@k8smaster tls]# openssl x509 -in ca.crt -noout -text
Certificate:Data:Version: 3 (0x2)Serial Number:88:42:bb:1b:0e:f9:2d:a4Signature Algorithm: sha256WithRSAEncryptionIssuer: C=CN, ST=HB, L=WH, O=DM, OU=YPT, CN=CAValidityNot Before: Jan  2 07:13:02 2020 GMTNot After : Dec 30 07:13:02 2029 GMTSubject: C=CN, ST=HB, L=WH, O=DM, OU=YPT, CN=CASubject Public Key Info:Public Key Algorithm: rsaEncryptionPublic-Key: (2048 bit)Modulus:00:b3:d7:15:32:f9:b0:3e:36:89:a9:70:a2:aa:ae:12:5c:6a:6c:3f:12:6f:1d:9c:dc:18:cf:c2:40:c3:81:8c:86:0c:fd:bb:24:e6:6c:aa:c1:b3:d4:45:52:57:f5:88:ef:aa:74:af:a1:d1:a6:c4:fa:06:63:df:78:41:69:a8:77:ae:a8:58:d0:11:e9:48:30:ea:a3:6f:ac:e6:06:a6:75:fa:f0:48:9a:c4:96:ab:90:bd:d6:eb:0c:7a:a1:4e:6b:c6:bd:0b:93:74:f6:3f:d2:94:22:87:df:a2:dc:65:0f:aa:b1:45:e3:31:e3:14:98:9a:b3:39:91:dd:83:05:7e:61:cd:ec:28:27:00:46:78:1b:cc:df:69:ee:9f:7f:3d:42:4a:65:b2:e3:b3:e5:f2:20:47:f0:88:06:6b:57:3d:2d:f1:93:12:8a:17:a5:be:75:bf:73:2f:98:c4:83:02:7f:28:56:0d:63:18:b0:eb:74:7b:33:e2:03:15:bf:51:74:0d:2b:2f:3c:09:47:d6:cf:6b:3b:3d:08:d7:1e:a5:8d:1a:79:f8:49:14:e6:69:7c:67:f3:a8:a4:3d:9f:e2:6b:4f:cc:95:d5:98:f7:65:e8:cb:94:d3:18:3f:c7:5d:59:a8:ac:c4:9f:84:ce:40:2b:c6:81:05:f6:82:b2:b5Exponent: 65537 (0x10001)X509v3 extensions:X509v3 Subject Key Identifier: 15:A7:E8:46:43:30:3C:43:02:75:13:98:67:CA:4F:02:53:44:89:4CX509v3 Authority Key Identifier: keyid:15:A7:E8:46:43:30:3C:43:02:75:13:98:67:CA:4F:02:53:44:89:4CX509v3 Basic Constraints: CA:TRUESignature Algorithm: sha256WithRSAEncryptiona4:87:5b:55:67:b5:6a:a6:b6:6a:ae:07:b1:36:85:9c:be:ec:08:53:74:15:56:9b:a0:5a:99:73:ee:6a:ff:10:b1:11:ff:c7:e0:9c:15:a5:f8:fb:3e:23:45:e9:de:c6:8f:f2:20:8c:56:21:a4:0e:51:c9:61:80:35:9a:39:54:81:b2:48:ae:11:70:e8:85:0c:fc:8f:0e:67:99:22:76:f3:65:3c:30:c4:b6:b4:79:da:99:0b:0d:54:b2:eb:1f:c3:89:b0:e7:80:36:fc:01:57:87:7b:d9:7d:4c:85:24:3c:53:38:d0:62:9c:68:c6:12:7d:0a:97:23:ea:ba:dc:a2:11:d0:54:28:81:83:c7:55:f8:91:cf:eb:43:41:f3:d3:de:19:0f:55:8d:18:91:2d:5f:ab:44:66:83:08:78:db:04:46:55:17:96:a1:2b:f0:39:e8:48:4b:88:2a:09:b8:62:fc:50:13:d1:27:46:0a:de:b3:2d:c4:58:c2:0c:45:cf:8d:3b:69:32:a5:d8:fd:97:7e:cb:f4:1d:00:ed:bb:24:40:eb:ec:7f:09:6f:06:eb:db:52:f1:70:88:8b:ad:4f:0e:af:bb:a4:56:29:e7:bd:42:e4:f0:a7:31:df:6b:2c:bd:8b:30:96:22:b0:56:76:fa:20:a7:ff:4b:22
[root@k8smaster tls]# openssl genrsa -out dashboard.key 2048
Generating RSA private key, 2048 bit long modulus
.....................................................................+++
.....................................................................................    ................................................................................................................+++
e is 65537 (0x10001)
[root@k8smaster tls]# cat >  dashboard.cnf  <<EOF
> extensions = san
> [san]
> keyUsage = digitalSignature
> extendedKeyUsage = clientAuth,serverAuth
> subjectKeyIdentifier = hash
> authorityKeyIdentifier = keyid,issuer
> subjectAltName = IP:$ip,IP:127.0.0.1,DNS:$ip,DNS:localhost
> EOF
[root@k8smaster tls]# openssl x509 -req -sha256 -days 3650 -in dashboard.csr -out dashboard.crt -CA ca.crt -CAkey ca.key -CAcreateserial -extfile dashboard.cnf
Signature ok
subject=/C=CN/ST=HB/L=WH/O=DM/OU=YPT/CN=192.168.43.136
Getting CA Private Key
[root@k8smaster tls]# cd ../
[root@k8smaster kubernetes-dashboard]# kubectl create secret generic     kubernetes-dashboard-certs --from-file="tls/dashboard.crt,tls/dashboard.key" -n kube-system 
[root@k8smaster kubernetes-dashboard]# kubectl delete -f kubernetes-dashboard.yaml 
secret "kubernetes-dashboard-certs" deleted
serviceaccount "kubernetes-dashboard" deleted
role.rbac.authorization.k8s.io "kubernetes-dashboard-minimal" deleted
rolebinding.rbac.authorization.k8s.io "kubernetes-dashboard-minimal" deleted
deployment.apps "kubernetes-dashboard" deleted
service "kubernetes-dashboard" deleted
[root@k8smaster kubernetes-dashboard]# kubectl create secret generic kubernetes-dashboard-certs --from-file="tls/dashboard.crt,tls/dashboard.key" -n kube-system 
secret/kubernetes-dashboard-certs created
[root@k8smaster kubernetes-dashboard]# kubectl apply -f kubernetes-dashboard.yaml 
Warning: kubectl apply should be used on resource created by either kubectl create --save-config or kubectl apply
secret/kubernetes-dashboard-certs configured
serviceaccount/kubernetes-dashboard created
role.rbac.authorization.k8s.io/kubernetes-dashboard-minimal created
rolebinding.rbac.authorization.k8s.io/kubernetes-dashboard-minimal created
deployment.apps/kubernetes-dashboard created
service/kubernetes-dashboard created
[root@k8smaster kubernetes-dashboard]# kubectl patch svc kubernetes-dashboard -n kube-system -p '{"spec":{"type":"NodePort"}}' 
service/kubernetes-dashboard patched
[root@k8smaster kubernetes-dashboard]# kubectl get svc -n kube-system
NAME                      TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                  AGE
kube-dns                  ClusterIP   10.96.0.10       <none>        53/UDP,53/TCP,9153/TCP   65d
kubernetes-dashboard      NodePort    10.107.167.69    <none>        443:31733/TCP            63s
traefik-ingress-service   ClusterIP   10.102.130.108   <none>        80/TCP,8080/TCP          16d
traefik-web-ui            ClusterIP   10.98.71.71      <none>        80/TCP                   16d

认证：

token：通过集群中认证的ServiceAccount的Token值来进行认证。
- 创建ServiceAccount，根据其管理目标，使用rolebinding或clusterrolebinding绑定到合理的role或者clusterrole。
- 获取到此ServiceAccount的secret，查看secret的Token值。
kubeconfig：
- 创建ServiceAccount，根据其管理目标，使用rolebinding或clusterrolebinding绑定到合理的role或者clusterrole。
- 通过“DEF_NS_ADMIN_TOKEN=$(kubectl get secret SERVICEACCOUNT_SECRET_NAME -o jsonpath={.data.token} | base64 -d) ”这条命令定义DEF_NS_ADMIN_TOKEN变量为ServiceAccount的secret的Token值。
- 生成kubeconfig文件。
  - kubectl config set-credentials def-ns-admin --token=$DEF_NS_ADMIN_TOKEN --kubeconfig=/root/def-ns-admin.conf
  - kubectl config set-context def-ns-admin@kubernetes --cluster=kubernetes --user=def-ns-admin --kubeconfig=/root/def-ns-admin.conf
  - kubectl config use-context def-ns-admin@kubernetes --kubeconfig=/root/def-ns-admin.conf

创建ServiceAccount（提供token认证）：

#创建一个ServiceAccount，绑定到cluster-admin，让它具有对整个k8s集群的控制权限
[root@k8smaster kubernetes-dashboard]# kubectl create serviceaccount dashboard-admin -n kube-system
serviceaccount/dashboard-admin created
[root@k8smaster kubernetes-dashboard]# kubectl create clusterrolebinding dashboard-cluster-admin  --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin
clusterrolebinding.rbac.authorization.k8s.io/dashboard-cluster-admin created
[root@k8smaster kubernetes-dashboard]# kubectl describe secret dashboard-admin-token-txf8r  -n kube-system
Name:         dashboard-admin-token-txf8r
Namespace:    kube-system
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: dashboard-adminkubernetes.io/service-account.uid: 9f4cd171-7eba-4df8-9bcf-c80c92067769Type:  kubernetes.io/service-account-tokenData
====
ca.crt:     1025 bytes
namespace:  11 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJkYXNoYm9hcmQtYWRtaW4tdG9rZW4tdHhmOHIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiZGFzaGJvYXJkLWFkbWluIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiOWY0Y2QxNzEtN2ViYS00ZGY4LTliY2YtYzgwYzkyMDY3NzY5Iiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50Omt1YmUtc3lzdGVtOmRhc2hib2FyZC1hZG1pbiJ9.rzA3VSSEwcSljh-33jk0bJ7WbHJwi7q2FQnEavhi21GQ_aezI0Bmww1T9R02tlIHALFhHbbAXAyDxmGmbMR6IZyrgAFrUc4ici-KCkh0_u9XSRIH-GhJPBbjyHohMsJFSeLaM4IEI6MaxYVIMujJwe-yizyyO59ou3VmVtORQKMB3BIodY_uVx7mLruppdlmybiMwi3uDKhIPCJZvLN8Nbu4bAHw-8LWWpbN0kzqCoYR12QD4Mtx47HxbEqp_Jv79oOaqfBJlYxKxijZE39t0wGN7WGRaqpRHM7nYMWg9WSNN6FOWlhQGcp5q-auIlx4GzNjeDENj1qAAiTOPwXSrg

复制dashboard-admin-token-txf8r的Token，粘贴到此处：

创建一个认证文件：

#创建一个serviceaccount，并把它绑定到admin，只具有default名称空间的管理权限。
[root@k8smaster kubernetes-dashboard]# kubectl create serviceaccount def-ns-admin -n default 
serviceaccount/def-ns-admin created
[root@k8smaster kubernetes-dashboard]# kubectl create rolebinding def-ns-admin --clusterrole=admin --serviceaccount=default:def-ns-admin
rolebinding.rbac.authorization.k8s.io/def-ns-admin created
[root@k8smaster kubernetes-dashboard]# kubectl get secret 
NAME                       TYPE                                  DATA   AGE
admin-token-bs7sd          kubernetes.io/service-account-token   3      47h
def-ns-admin-token-flw6j   kubernetes.io/service-account-token   3      2m4s
default-token-kk2fq        kubernetes.io/service-account-token   3      65d
mysql-root-password        Opaque                                1      12d
[root@k8smaster kubernetes-dashboard]# DEF_NS_ADMIN_TOKEN=$(kubectl get secret def-ns-admin-token-flw6j -o jsonpath={.data.token} | base64 -d) 
[root@k8smaster kubernetes-dashboard]# kubectl config set-cluster kubernetes --certificate-authority=./tls/ca.crt --server="https://192.168.43.45:6443" --embed-certs=true --kubeconfig=/root/def-ns-admin.conf
Cluster "kubernetes" set.
[root@k8smaster kubernetes-dashboard]# kubectl config view --kubeconfig=/root/def-ns-admin.conf
apiVersion: v1
clusters:
- cluster:certificate-authority-data: DATA+OMITTEDserver: https://192.168.43.45:6443name: kubernetes
contexts: []
current-context: ""
kind: Config
preferences: {}
users: []
[root@k8smaster kubernetes-dashboard]# kubectl config set-credentials def-ns-admin --token=$DEF_NS_ADMIN_TOKEN --kubeconfig=/root/def-ns-admin.conf
User "def-ns-admin" set.
[root@k8smaster kubernetes-dashboard]# kubectl config view --kubeconfig=/root/def-ns-admin.conf
apiVersion: v1
clusters:
- cluster:certificate-authority-data: DATA+OMITTEDserver: https://192.168.43.45:6443name: kubernetes
contexts: []
current-context: ""
kind: Config
preferences: {}
users:
- name: def-ns-adminuser:token: eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJkZWZhdWx0Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6ImRlZi1ucy1hZG1pbi10b2tlbi1mbHc2aiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJkZWYtbnMtYWRtaW4iLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiJkNjk1Yzc5OC1jYTU3LTQ0OGItYjY2My1kNGIyZTcxNzFjN2MiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6ZGVmYXVsdDpkZWYtbnMtYWRtaW4ifQ.FAUUbzFpcYaRVtJSdP8ehJf8DQi6wHHcJZjjffGuKeW0IlNEvD20FMm-5W5nXprll4Fbk238mtnnER0IUSchaTH2dj64WDwyLqtlecKI4UzIyZkDWV2JQM8iDGtL7m53XCF9Syw5ajp6RHaPU5U1GDU3ULp79oPZgXKcibY0JA7qSQpVitDiJM80GidT2TiarwXu6tToW5Y9iV0Xt-FrwKvJIcnpGgn3EFycLiA7Pwn-oty7Xi-mGIQW3JGsXC0_rBIBNy578a7ak4tIIEJT-qJE1nnmjNNSUqxqXFPb2aXnoDTST7Y-N_ZCzy_OzxpPvQqKPcr0JY3jpCwmLfMAkw
[root@k8smaster kubernetes-dashboard]# kubectl config set-context def-ns-admin@kubernetes --cluster=kubernetes --user=def-ns-admin --kubeconfig=/root/def-ns-admin.conf
Context "def-ns-admin@kubernetes" created.
[root@k8smaster kubernetes-dashboard]# kubectl config use-context def-ns-admin@kubernetes --kubeconfig=/root/def-ns-admin.conf
Switched to context "def-ns-admin@kubernetes".
[root@k8smaster kubernetes-dashboard]# kubectl config view --kubeconfig=/root/def-ns-admin.conf
apiVersion: v1
clusters:
- cluster:certificate-authority-data: DATA+OMITTEDserver: https://192.168.43.45:6443name: kubernetes
contexts:
- context:cluster: kubernetesuser: def-ns-adminname: def-ns-admin@kubernetes
current-context: def-ns-admin@kubernetes
kind: Config
preferences: {}
users:
- name: def-ns-adminuser:token: eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJkZWZhdWx0Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6ImRlZi1ucy1hZG1pbi10b2tlbi1mbHc2aiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJkZWYtbnMtYWRtaW4iLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiJkNjk1Yzc5OC1jYTU3LTQ0OGItYjY2My1kNGIyZTcxNzFjN2MiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6ZGVmYXVsdDpkZWYtbnMtYWRtaW4ifQ.FAUUbzFpcYaRVtJSdP8ehJf8DQi6wHHcJZjjffGuKeW0IlNEvD20FMm-5W5nXprll4Fbk238mtnnER0IUSchaTH2dj64WDwyLqtlecKI4UzIyZkDWV2JQM8iDGtL7m53XCF9Syw5ajp6RHaPU5U1GDU3ULp79oPZgXKcibY0JA7qSQpVitDiJM80GidT2TiarwXu6tToW5Y9iV0Xt-FrwKvJIcnpGgn3EFycLiA7Pwn-oty7Xi-mGIQW3JGsXC0_rBIBNy578a7ak4tIIEJT-qJE1nnmjNNSUqxqXFPb2aXnoDTST7Y-N_ZCzy_OzxpPvQqKPcr0JY3jpCwmLfMAkw

把/root/def-ns-admin.conf这个文件复制到宿主机中：

Dashboard界面结构分为三个大的区域：

顶部操作区：在这里用户可以搜索集群中的资源、创建资源或退出。
左边导航菜单：通过导航菜单可以查看和管理集群中的各种资源。菜单项按照资源的层级分为两类：Cluster 级别的资源，Namespace 级别的资源，默认显示的是 default Namespace，可以进行切换。
中间主体区：在导航菜单中点击了某类资源，中间主体区就会显示该资源所有实例，比如点击 Pods。

查看全文
如若内容造成侵权/违法违规/事实不符，请联系编程学习网邮箱：809451989@qq.com进行投诉反馈，一经查实，立即删除！

EV Growth完成2.5亿美元基金募集
这家风投公司达到2.5亿美元硬上限在完成1.5亿美元的最初目标之后，该基金达到硬上限连同活跃资金规模，计划对东南亚初创企业投入3.25亿美元，包括种子期阶段和成长期阶段新加坡--(美国商业资讯)--总部位于新加坡的风险投资公司EV Growth首档基金募集资金达到2.5亿美元硬上限，…...
2024/5/6 20:14:53
在计算边缘寻求平衡
2019年刚过去，迈入了新时代，站在十年的风口浪尖上，我们可以看到，未来十年也将充满颠覆性变化。我们已经开始向社会迁移，以利用物联网，云（以及任何雾化技术）以及最新一代的硬件到功能矩阵中的“智能”生活方式使所有人受益。变革的步伐只会在速度和决心上增长。迁移的破…...
2024/5/6 20:14:49
crm4-创建自己的admin时发生(admin.E108) The value of 'list_display[5]' refers to 'status',
我在admin.py中定义了一个CustomerAdmin类class CustomerAdmin(admin.ModelAdmin):list_display = (id, qq, source, consultant, content, status, date)list_filter = (source, consultant, date)search_fields = (qq, name)raw_id_fields = (consult_course,)filter_horizon…...
2024/5/6 20:14:45
docker快速安装
系统：centos 7.4 1.前提：内核版本需要不小于3.10，不然docker起不来 uname -r 查看当前内核版本 2.安装docker的依赖包 yum install -y yum-utils lvm2 device-mapper-persistent-data 3.配置docker源 yum-config-manager --add-repo https://download.d…...
2024/5/6 20:14:42
matplotlib设置窗体大小和标题
示例代码 import matplotlib.pyplot as plt import numpy as npfig = plt.figure(figsize=(6, 3)) fig.canvas.set_window_title(I am title) x = np.linspace(0, 10, 100) plt.plot(x, np.sin(x)) plt.show()效果...
2024/5/6 20:14:37
如何改变linux系统的只读文件的权限
vim 编辑可以在命令模式输入 :wq! 保存退出可以用chmod 命令修改文件权限。 chmod命令是非常重要的，用于改变文件或目录的访问权限。用户用它控制文件或目录的访问权限。该命令有两种用法。一种是包含字母和操作符表达式的文字设定法；另一种是包含数字的数字设定法。用法…...
2024/5/6 20:14:33
【中】4、搜索旋转排序数组
题目描述：假设按照升序排序的数组在预先未知的某个点上进行了旋转。( 例如，数组 [0,1,2,4,5,6,7] 可能变为 [4,5,6,7,0,1,2] )。搜索一个给定的目标值，如果数组中存在这个目标值，则返回它的索引，否则返回 -1 。你可以假设数组中不存在重复的元素。你的算法时间复杂度必须是…...
2024/5/6 20:14:29
14.wx存储数据到本地及本地获取
1.wx存储数据到本地以及本地获取数存到本地就是存到你的手机,侬懂了伐？wx.setStorageSync与wx.setStorage1.1 wx.setStorageSync(string key, any data)(同步) 参数 **string key: **本地缓存中指定的 key **any data: **需要存储的内容。只支持原生类型、Date、及能够通过JS…...
2024/5/6 16:55:27
mysql中#和$的区别
上网看了好多博客，大多都一个意思，但是自己好像没怎么彻底理解具体原因，只是大概知道几个点还是记下的，并未理解。最后看到https://blog.csdn.net/qq_35978746/article/details/54944644算是明白了其中的道理；总结下来就以下这麽几点： 1：# 自己会带有双引号，$并不会 …...
2024/5/6 20:14:21
小程序的相关配置
目录1、project 和 sitemap 配置2、全局配置 app3、局部配置 page小程序的很多开发需求被规定在了配置文件中，这样做可以更有利于提高的开发效率，并且可以保证开发出来的小程序的某些风格是比较一致的，比如导航栏、顶部TabBar，以及页面路由等等。小程序中有很多配置，其大致…...
2024/5/6 14:00:19
[LeetCode] 183、从不订购的客户
题目描述某网站包含两个表，Customers 表和 Orders 表。编写一个 SQL 查询，找出所有从不订购任何东西的客户。解题思路图解SQL面试题：查找不在表里的数据 select a.Name as Customers from Customers as a left join Orders as b on a.Id=b.CustomerId where b.CustomerId…...
2024/5/6 20:14:13
【百度大脑新品体验】人脸情绪实时识别
【百度大脑新品体验】人脸情绪实时识别作者：才能我浪费99 首先认证授权：在开始调用任何API之前需要先进行认证授权，具体的说明请参考： http://ai.baidu.com/docs#/Auth/top 获取Access Token 向授权服务地址https://aip.baidubce.com/oauth/2.0/token发送请求（推荐使用P…...
2024/5/6 20:14:09
商城项目-商品详情
1.商品详情当用户搜索到商品，肯定会点击查看，就会进入商品详情页，接下来我们完成商品详情页的展示， 1.1.Thymeleaf 在商品详情页中，我们会使用到Thymeleaf来渲染页面，所以需要先了解Thymeleaf的语法。详情请看: https://blog.csdn.net/weixin_42528266/article/details…...
2024/5/6 20:14:05
创建一个文件字节输入流
package cn.itast.chap.stttt01.字节流测试; import java.io.*;public class Example01 {public static void main(String[] args) throws Exception {//创建一个文件字节输入流FileInputStream fis = new FileInputStream("test.txt");int b = 0;while (true) {b = …...
2024/5/6 20:14:01
商城项目-优化
7.优化搜索系统需要优化的点：查询规格参数部分可以添加缓存聚合计算interval变化频率极低，所以可以设计为定时任务计算（周期为天），然后缓存起来。 elasticsearch本身有查询缓存，可以不进行优化商品图片应该采用缩略图，减少流量，提高页面加载速度图片采用延迟加载图…...
2024/5/6 15:15:43
lambda表达式
JDK8新特性-lambda表达式 package com.zenqgifeng.practicedemo.lambda;/*** @author zengqifeng* @version 1.0* @date 2019/12/31 11:25* lambda表达式的作用其实和匿名内部类一样最终都是重写方法，创建了该接口的子类及子类对象传递给调用方* 所以只要接收方是函数式…...
2024/5/6 20:13:53
FilewriterTest01
package cn.itast.chap.sttt01.IO_FileIoputStream输入流和FileOutputStream输出流; /* java.io.writer;java.io.OutputStreamWriter;//转换流(字节输出流 ---->字符输出流);java.io.FileWriter; */import java.io.*;public class Filewriter_Test01 { public static void …...
2024/5/6 20:13:49
父类引用指向子类
Java 转型问题其实并不复杂，只要记住一句话：父类引用指向子类对象。什么叫父类引用指向子类对象，且听我慢慢道来。从 2 个名词开始说起：向上转型(upcasting) 、向下转型(downcasting)。举个例子：有2个类，Father 是父类，Son 类继承自 Father。第 1 个例子：Father f1 = n…...
2024/5/6 12:58:10
RPA无法落地，两大原因不可忽视
机器人可以帮助人们完成许多曾经需要人类亲力亲为的事务。当一部分工作交给机器人去完成，人们就可以去做那些以往我们没有意识到的任务，由此将产生一大批不同种类的新任务，甚至可能催生出新的职业。而我们交给机器人的都是需要效率或生产率的任务，提升效率是机器人擅长的领…...
2024/5/6 14:21:17
FileReader_Test01
package cn.itast.chap.sttt01.IO_FileIoputStream输入流和FileOutputStream输出流;/** java.io.Readerjava.io.InputStream //转换流(字节输入---->字符输入java.io.Reader //文件输入流 */ import java.io.*; public class FileReader_Test01 { public static void main…...
2024/5/6 8:38:17

K8s第八篇Kubernetes-Dashboard

Kubernetes-Dashboard

Kubernetes Dashboard功能：

Github：https://github.com/kubernetes/dashboard

部署Kubernetes-Dashboard：

k8smatser：

k8snode1：

k8snode2：

自建证书（默认的证书有问题，气死了！！！）

k8smatser：

认证：

创建ServiceAccount（提供token认证）：

复制dashboard-admin-token-txf8r的Token，粘贴到此处：

创建一个认证文件：

把/root/def-ns-admin.conf这个文件复制到宿主机中：

Dashboard界面结构分为三个大的区域：

相关文章

最新文章