部署 Dashboard - 容器相关

kubernetes Dashboard github页面：
https://github.com/kubernetes/dashboard/releases

###部署 Dashboard

下载dashboard v2.0.0-rc4 yaml文件

wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-rc4/aio/deploy/recommended.yaml

部署dashboard服务

kubectl create -f kubernetes-dashboard.yaml

##访问dashboard

有以下几种方式访问dashboard：

Nodport方式访问dashboard，service类型改为NodePort
	loadbalacer方式，service类型改为loadbalacer
	Ingress方式访问dashboard
	API server方式访问 dashboard
	kubectl proxy方式访问dashboard
	NodePort方式
	
为了便于本地访问，修改yaml文件，将service改为NodePort 类型：

[centos@k8s-master ~]$ vim recommended.yaml 
	......
	---
	# ------------------- Dashboard Service ------------------- #

kind: Service
	apiVersion: v1
	metadata:
	  labels:
	    k8s-app: kubernetes-dashboard
	  name: kubernetes-dashboard
	  namespace: kube-system
	spec:
	  type: NodePort       #增加type: NodePort
	  ports:
	    - port: 443
	      targetPort: 8443
	      nodePort: 31620  #增加nodePort: 31620
	  selector:
	    k8s-app: kubernetes-dashboard
	
重新应用yaml文件

kubectl apply -f recommended.yaml

查看service，TYPE类型已经变为NodePort，端口为31620

[centos@k8s-master ~]$ kubectl get service -A | grep dashboard
	kubernetes-dashboard   NodePort    10.107.160.197   <none>        443:31620/TCP   32m

通过浏览器访问：https://192.168.92.56:31620/， 登录界面如下：
![](/media//202002/2020-02-21152355407090.png)

###Dashboard 支持 Kubeconfig 和 Token 两种认证方式，我们这里选择Token认证方式登录：

###创建登录用户
官方参考文档：
https://github.com/kubernetes/dashboard/wiki/Creating-sample-user

####创建dashboard-adminuser.yaml：

[centos@k8s-master ~]$ vim dashboard-adminuser.yaml
	apiVersion: v1
	kind: ServiceAccount
	metadata:
	  name: admin-user
	  namespace: kube-system
	---
	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRoleBinding
	metadata:
	  name: admin-user
	roleRef:
	  apiGroup: rbac.authorization.k8s.io
	  kind: ClusterRole
	  name: cluster-admin
	subjects:
	- kind: ServiceAccount
	  name: admin-user
	  namespace: kube-system

####执行yaml文件：

kubectl create -f dashboard-adminuser.yaml

>说明：上面创建了一个叫admin-user的服务账号，并放在kube-system命名空间下，并将cluster-admin角色绑定到admin-user账户，这样admin-user账户就有了管理员的权限。默认情况下，kubeadm创建集群时已经创建了cluster-admin角色，我们直接绑定即可。

####查看admin-user账户的token

kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')

[centos@k8s-master ~]$ kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')
	Name:         admin-user-token-jtlbp
	Namespace:    kube-system
	Labels:       <none>
	Annotations:  kubernetes.io/service-account.name: admin-user
              kubernetes.io/service-account.uid: a345b4d5-1006-11e9-b90d-000c291c25f3

Type:  kubernetes.io/service-account-token

Data
	====
	ca.crt:     1025 bytes
	namespace:  11 bytes
	token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi11c2VyLXRva2VuLWp0bGJwIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImFkbWluLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiJhMzQ1YjRkNS0xMDA2LTExZTktYjkwZC0wMDBjMjkxYzI1ZjMiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZS1zeXN0ZW06YWRtaW4tdXNlciJ9.uv3pzkM3_WQ8_gOwzEvKGrwfhXKtQmDYtfMpjmCDsPsq7OP3W5o0uFxKS7q2zbxw_pFZ3pFMyEk462RZo5z-Z6AB9gOXffvhqllSIQi3SzesvRcBqqW1n48SalGgBkCiqkX4DjjYDrHCAd5m-Uc7e3N28jWW5O4gUXEWwUtcobLVflEOnZ9Ykx9JBZPkmmS25toyoE6v8W7Zuv1moGBxmx4_AEnAFBUNDjZ7AxvmERQL-cQk6vsfrQ-hPejE1L3kgLbhpQnqQ3lJ3z7hrGMur31muW3WeOvd3Aciqr0TliyP1Wllf-hPuLPDsLdNZJpMx1B8O5jnw1cYbLsqQAaUXQ

把获取到的Token复制到登录界面的Token输入框中:

![](/media//202002/2020-02-22124946841171.png)

成功登陆dashboard:

![](/media//202002/2020-02-2115253566155517865201-af7d3817e27503a4.png)

###参考资料：
kubernetes部署dashboard可视化插件
https://blog.csdn.net/networken/article/details/85607593

出现 404 NOT FOUND 以及无法访问网页的问题:
https://hacpai.com/article/1579223747872