k8s 安装dashboard

准备

1. 下载部署脚本
   https://github.com/kubernetes/dashboard
2. 阅读参考文章
   参考文章：https://www.cnblogs.com/RainingNight/p/deploying-k8s-dashboard-ui.html

部署

证书

openssl req -nodes -newkey rsa:2048 -keyout certs/dashboard.key -out certs/dashboard.csr -subj "/C=/ST=/L=/O=/OU=/CN=kubernetes-dashboard"
openssl x509 -req -sha256 -days 365 -in certs/dashboard.csr -signkey certs/dashboard.key -out certs/dashboard.crt
kubectl create secret generic kubernetes-dashboard-certs --from-file=certs -n kube-system

# 生成p12，并导入到浏览器
openssl pkcs12 -export -clcerts -inkey kubecfg.key -in kubecfg.crt -out dashboard.p12 -name "dashboard-client"

运行部署脚本

kubectl apply -f dashboard.yaml

获取token 登陆验证

kubectl describe secret $(kubectl get secret -n kube-system |grep kubernetes-dashboard|awk '{print $1}') -n kube-system

https://<master-ip>:<apiserver-port>/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/

注意：如果在创建pod 生成时候报错，api-service 的地址变成了 cluster-ip，可以修改部署文件，强行选择master节点