k8s部署Web UI界面（dashboard）

1，下載kubernetes-dashboard.yaml

 wget https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml

2，編輯kubernetes-dashboard.yaml

[root@master ~]# vi kubernetes-dashboard.yaml 

# ------------------- Dashboard Deployment ------------------- #

kind: Deployment
apiVersion: apps/v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kube-system
spec:
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      k8s-app: kubernetes-dashboard
  template:
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
    spec:
      containers:
      - name: kubernetes-dashboard
        image: lizhenliang/kubernetes-dashboard-amd64:v1.10.1
        ....

# ------------------- Dashboard Service ------------------- #

kind: Service
apiVersion: v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kube-system
spec:
  type: NodePort

3，啓動kubernetes-dashboard.yaml 文件，並查看狀態

[root@master ~]# kubectl apply -f kubernetes-dashboard.yaml 
[root@master ~]# kubectl get pods -n kube-system
NAME                                READY   STATUS    RESTARTS   AGE
coredns-5c98db65d4-77hpt            1/1     Running   8          2d5h
coredns-5c98db65d4-9ftmb            1/1     Running   10         2d5h
etcd-master                         1/1     Running   6          2d5h
kube-apiserver-master               1/1     Running   6          2d5h
kube-controller-manager-master      1/1     Running   6          2d5h
kube-flannel-ds-amd64-6hmdd         1/1     Running   3          2d2h
kube-flannel-ds-amd64-bb5rd         1/1     Running   1          2d2h
kube-flannel-ds-amd64-jhxsq         1/1     Running   2          2d2h
kube-flannel-ds-amd64-k7jpv         1/1     Running   7          2d5h
kube-proxy-7whp6                    1/1     Running   3          2d2h
kube-proxy-8rjkb                    1/1     Running   2          2d2h
kube-proxy-r76s5                    1/1     Running   1          2d2h
kube-proxy-rvr56                    1/1     Running   7          2d5h
kube-scheduler-master               1/1     Running   7          2d5h
kubernetes-dashboard-79ddd5-5hprt   1/1     Running   0          40m

查看詳細信息：

[root@master ~]# kubectl get pods -n kube-system -o wide
NAME                                READY   STATUS    RESTARTS   AGE    IP                NODE     NOMINATED NODE   READINESS GATES
coredns-5c98db65d4-77hpt            1/1     Running   8          2d5h   10.244.0.16       master   <none>           <none>
coredns-5c98db65d4-9ftmb            1/1     Running   10         2d5h   10.244.0.15       master   <none>           <none>
etcd-master                         1/1     Running   6          2d5h   192.168.200.129   master   <none>           <none>
kube-apiserver-master               1/1     Running   6          2d5h   192.168.200.129   master   <none>           <none>
kube-controller-manager-master      1/1     Running   6          2d5h   192.168.200.129   master   <none>           <none>
kube-flannel-ds-amd64-6hmdd         1/1     Running   3          2d2h   192.168.200.131   node02   <none>           <none>
kube-flannel-ds-amd64-bb5rd         1/1     Running   1          2d2h   192.168.200.130   node01   <none>           <none>
kube-flannel-ds-amd64-jhxsq         1/1     Running   2          2d2h   192.168.200.132   node03   <none>           <none>
kube-flannel-ds-amd64-k7jpv         1/1     Running   7          2d5h   192.168.200.129   master   <none>           <none>
kube-proxy-7whp6                    1/1     Running   3          2d2h   192.168.200.131   node02   <none>           <none>
kube-proxy-8rjkb                    1/1     Running   2          2d2h   192.168.200.132   node03   <none>           <none>
kube-proxy-r76s5                    1/1     Running   1          2d2h   192.168.200.130   node01   <none>           <none>
kube-proxy-rvr56                    1/1     Running   7          2d5h   192.168.200.129   master   <none>           <none>
kube-scheduler-master               1/1     Running   7          2d5h   192.168.200.129   master   <none>           <none>
kubernetes-dashboard-79ddd5-5hprt   1/1     Running   0          40m    10.244.0.17       master   <none>           <none>

查詢端口號：

kubectl get svc -n kube-system -o wide
NAME                   TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                  AGE    SELECTOR
kube-dns               ClusterIP   10.96.0.10       <none>        53/UDP,53/TCP,9153/TCP   2d5h   k8s-app=kube-dns
kubernetes-dashboard   NodePort    10.103.174.152   <none>        443:31061/TCP            41m    k8s-app=kubernetes-dashboard

通過瀏覽器訪問：

4，生成令牌

[root@master ~]# kubectl create serviceaccount dashboard-admin -n kube-system
[root@master ~]# kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin
[root@master ~]#  kubectl get secret -n kube-system
NAME                                             TYPE                                  DATA   AGE
attachdetach-controller-token-gvf8m              kubernetes.io/service-account-token   3      2d5h
bootstrap-signer-token-l788b                     kubernetes.io/service-account-token   3      2d5h
certificate-controller-token-slcml               kubernetes.io/service-account-token   3      2d5h
clusterrole-aggregation-controller-token-sq5lq   kubernetes.io/service-account-token   3      2d5h
coredns-token-g874c                              kubernetes.io/service-account-token   3      2d5h
cronjob-controller-token-67mgj                   kubernetes.io/service-account-token   3      2d5h
daemon-set-controller-token-vb9ls                kubernetes.io/service-account-token   3      2d5h
dashboard-admin-token-968gs                      kubernetes.io/service-account-token   3      15m

生成令牌：

[root@master ~]# kubectl describe secret dashboard-admin-token-968gs -n kube-system
Name:         dashboard-admin-token-968gs
Namespace:    kube-system
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: dashboard-admin
              kubernetes.io/service-account.uid: 251f6434-7bb4-43d0-b601-eff14b22ecd1

Type:  kubernetes.io/service-account-token

Data
====
namespace:  11 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJkYXNoYm9hcmQtYWRtaW4tdG9rZW4tOTY4Z3MiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiZGFzaGJvYXJkLWFkbWluIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiMjUxZjY0MzQtN2JiNC00M2QwLWI2MDEtZWZmMTRiMjJlY2QxIiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50Omt1YmUtc3lzdGVtOmRhc2hib2FyZC1hZG1pbiJ9.lwoiB42d_JBkTf-UE3_Mc7ZiWZkjjjycg-_11F1aNXLPJDlwV85dra-Azr9CUVHoeadN90CUMRw0BwNPSA7fMoUg7OHBV1i97CiMzqF-jSiYiH567ERD7coFNReWv6olLJhzq60rhQFH8GrQ6ekWQ6-W4XNc_oCk-NfyjVOhxsdtt7vfyGqUgkolvK7C_iSnn1fJWQK4whC9gN_v822byePFUkUUSkzErqlT_1UE__glrndf4vYYoXAYWU2E64cwkxQ32X3OU7wI3g9eRhGaFBBnAQIJ9AOlRGoRMeqsDiPdhffvVZlm6lNG4z-f4-R_JczSFMn_QEJ9Ou8_vbnC9w
ca.crt:     1025 bytes
[root@master ~]# 

複製令牌到瀏覽器中：