k8s-dashboard

一、windows可以通过端口转发将流量转发至dashboard

ssh -L 9000:192.168.1.50:8001 192.168.1.50 -l root

二、暴露dashboard端口

 kubectl proxy --address='192.168.1.50' --accept-hosts='^*$'

三、创建服务账户后，可能没有secret，此时要自己生成，然后再获取token

user.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user-a
  namespace: kubernetes-dashboard

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user-a
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user-a
  namespace: kubernetes-dashboard
 

secret.yaml

apiVersion: v1
kind: Secret
metadata:
  name: admin-user-secret
  namespace: kubernetes-dashboard
  annotations:
    kubernetes.io/service-account.name: admin-user
type: kubernetes.io/service-account-token

四、获取token

kubectl get secret admin-user-secret -n kubernetes-dashboard -o jsonpath="{.data.token}" | base64 --decode

五、将token放到dashboard的登录界面即可