K8S的Dashboard登录及验证

K8S的Dashboard登录验证

• 安装环境
• 用户创建
• Token创建
• • 临时Token创建
  • 长期Token创建
• 登录验证

安装环境

参考Ubuntu22.04离线安装K8S

用户创建

1. 创建用户配置文件DashboardCreateAdminUser.yaml

   apiVersion: v1
   kind: ServiceAccount
   metadata:
   name: admin-user
   namespace: kubernetes-dashboard

2. 导入用户

kubectl apply -f DashboardCreateAdminUser.yaml

3. 创建用户角色绑定配置文件DashboardClusterRoleBinding.yaml

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRoleBinding
   metadata:
   name: admin-user
   roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: cluster-admin
   subjects:

   • kind: ServiceAccount
     name: admin-user
     namespace: kubernetes-dashboard

4. 导入用户角色绑定配置

kubectl apply -f DashboardClusterRoleBinding.yaml

5. 查看kubernetes-dashboard空间下的用户

kubectl get serviceAccounts -n kubernetes-dashboard

Token创建

临时Token创建

创建命令

kubectl -n kubernetes-dashboard create token admin-user

长期Token创建

1. 创建长期密钥配置文件DashboardPermanentToken.yaml

   apiVersion: v1
   kind: Secret
   metadata:
   name: admin-user
   namespace: kubernetes-dashboard
   annotations:
   kubernetes.io/service-account.name: "admin-user"
   type: kubernetes.io/service-account-token

2. 生成长期Token

kubectl apply -f DashboardPermanentToken.yaml

3. 获取登录Token

kubectl get secret admin-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d

登录验证

1. 根据安装教程中的配置我们登录K8S首页
   
2. 输入刚才获取到的Token，点击登录