K8S的Dashboard登录及验证

安装环境

参考Ubuntu22.04离线安装K8S

用户创建

1. 创建用户配置文件DashboardCreateAdminUser.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard

2. 导入用户

kubectl apply -f DashboardCreateAdminUser.yaml

3. 创建用户角色绑定配置文件DashboardClusterRoleBinding.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kubernetes-dashboard

4. 导入用户角色绑定配置

kubectl apply -f DashboardClusterRoleBinding.yaml

5. 查看kubernetes-dashboard空间下的用户

kubectl get serviceAccounts -n kubernetes-dashboard

Token创建

临时Token创建

创建命令

kubectl -n kubernetes-dashboard create token admin-user

长期Token创建

1. 创建长期密钥配置文件DashboardPermanentToken.yaml

apiVersion: v1
kind: Secret
metadata:
  name: admin-user
  namespace: kubernetes-dashboard
  annotations:
    kubernetes.io/service-account.name: "admin-user"
type: kubernetes.io/service-account-token

2. 生成长期Token

kubectl apply -f DashboardPermanentToken.yaml

3. 获取登录Token

kubectl get secret admin-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d

登录验证

1. 根据安装教程中的配置我们登录K8S首页
   
2. 输入刚才获取到的Token，点击登录