目录

1. 部署DashBoard

 2. 使用DashBoard

---

前面在Kubernetes中完成的所有操作都是通过命令工具kubectl完成的。其实为了提供更丰富的用户体验，kubernetes还开发了一个基于web的用户界面（DashBoard）。用户可以使用Dashboard部署容器化的应用，还可以监控应用的状态，执行故障排查以及管理kubernetes中各种资源。

1. 部署DashBoard

1）下载yaml并运行Dashboard

#下载yaml
[root@k8s-master01 ~]# wget  https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.0/aio/deploy/recommended.yaml

#修改kubernetes-dashboard的Service类型
kind: Service
apiVersion: v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
spec:
  type: NodePort #新增
  ports:
    - port: 443
      targetPort: 8443
      nodePort: 30009  #新增
  selector:
    k8s-app: kubernetes-dashboard

#部署
[root@k8s-master01 ~]# kubectl create -f recommended.yaml 
#查看namespace下的kubernetes-dashboard的资源
[root@k8s-master01 ~]# kubectl  get pod,svc -n kubernetes-dashboard
NAME                                             READY   STATUS    RESTARTS   AGE
pod/dashboard-metrics-scraper-799d786dbf-h8njp   1/1     Running   0          117s
pod/kubernetes-dashboard-546cbc58cd-9twzv        1/1     Running   0          117s

NAME                                TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)         AGE
service/dashboard-metrics-scraper   ClusterIP   10.107.34.39     <none>        8000/TCP        117s
service/kubernetes-dashboard        NodePort    10.110.115.159   <none>        443:30009/TCP   117s

2）创建访问账户，获取token

#创建账号
[root@k8s-master01 ~]# kubectl create serviceaccount dashboard-admin -n kubernetes-dashboard
serviceaccount/dashboard-admin created

#授权
[root@k8s-master01 ~]# kubectl create clusterrolebinding dashboard-admin-rb --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:dashboard-admin
clusterrolebinding.rbac.authorization.k8s.io/dashboard-admin-rb created

#获取账号token
[root@k8s-master01 ~]# kubectl get secrets -n kubernetes-dashboard | grep dashboard-admin
dashboard-admin-token-rwlgt        kubernetes.io/service-account-token   3      45s
[root@k8s-master01 ~]# kubectl describe secrets dashboard-admin-token-rwlgt -n kubernetes-dashboard
Name:         dashboard-admin-token-rwlgt
Namespace:    kubernetes-dashboard
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: dashboard-admin
              kubernetes.io/service-account.uid: 50b8d184-3ddc-4c69-b124-09ad0b7f22dc

Type:  kubernetes.io/service-account-token

Data
====
namespace:  20 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IjF2ODQyT2JyN0VVRUxJYnN0NVBwTGtmRXM1SnZmYXM5Q2NtQm9DU1BJOUUifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJkYXNoYm9hcmQtYWRtaW4tdG9rZW4tcndsZ3QiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiZGFzaGJvYXJkLWFkbWluIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiNTBiOGQxODQtM2RkYy00YzY5LWIxMjQtMDlhZDBiN2YyMmRjIiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50Omt1YmVybmV0ZXMtZGFzaGJvYXJkOmRhc2hib2FyZC1hZG1pbiJ9.fHXuliJZgj-emWK7WTTQ3C_Ce3NJU2pA1N2_m1jzbYvJSkGw7c-Tp6ewMVhG_9UHHubJKmvRkZajD-4t1-NIgXNK3jKwF36YgLlUFDW4CLQJqhOtLsI22xlPt9f6S3xNrOmi_CNZeyVnSI8Z45GLmv5j9fCLXC2qw-wmGLeoebfMeL_E1dBOgZffdsWGV85T6dtt84bJ8saQsMb7ST0F521cYtB8jJLwo5eZmEpL1QB_0p__Hu6hCjlQXgi4qpymOzDyoAjPS4ZV-geXZ_jY4KG_IRAneJsjzKsVRd3c6bfFs1HwxW4ceskvyriIqGeFD827Pv2V_LrbkVQyIrT9Kw
ca.crt:     1099 bytes

3）通过浏览器访问Dashboard的UI，在登录页面上输入token

 进入后是这样

 2. 使用DashBoard

以Deployment为例演示DashBoard的使用。

查看

 选择指定命名空间 dev ，然后点击 Deployments ，查看 dev 空间下所有 deployment

 扩缩容

在 Deployment 上点击缩放，然后指定目标副本数量，点击确定

 编辑

在 Deployment 上点击编辑，然后确定修改yaml文件

 查看Pod

点击Pods，查看pods列表

 操作Pod

选中某个Pod，可以对其执行日志（logs）、进入执行（exec）、编辑、删除操作

 ashboard提供了kubectl的绝大部分功能，这里不再全部演示