Kubernetes Dashboard 生成token

最新推荐文章于 2025-05-30 19:02:40 发布

原创最新推荐文章于 2025-05-30 19:02:40 发布 · 8.6k 阅读

10 ·

CC 4.0 BY-SA版权

本文为博主(凯)原创文章，转载请注明出处。

文章标签：

#kubernetes #dashboard #docker

本文详细介绍如何在Kubernetes环境中生成用于Dashboard登录的Token。包括创建Service Account、配置Cluster Role Binding以及获取Token的具体步骤。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

刚装完dashboard打开页面是这样的，需要token 才可以进入

生成token

根据官方文档
- https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md

创建dashboard-adminuser.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
name: admin-user
namespace: kubernetes-dashboard

执行 kubectl apply -f dashboard-adminuser.yaml

创建admin-user-role-binding.yaml

apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: admin-user
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: cluster-admin
 subjects:
 - kind: ServiceAccount
   name: admin-user
   namespace: kubernetes-dashboard

执行kubectl create -f admin-user-role-binding.yaml

clusterrolebinding.rbac.authorization.k8s.io/admin-user created

生成token

➜ kubectl -n kubernetes-dashboard get secret $(kubectl -n kubernetes-dashboard get sa/admin-user -o jsonpath="{.secrets[0].name}") -o go-template="{{.data.token | base64decode}}"

eyJcdGciOiJSUzI1NiIsImtpZCI6IjByaWotQUN0TWVxTUZwNXlTaFJKMzZaTlpuNmliSWRCQ0NnaldNYWV3eUEifQ.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.VHJrN23QG8xvl5ervkDVhzZ6PoB1-mOJR418YyF6-DJ1TLMr_imZE8-z8TKMUyg61JWliu2aboibyLrOOAZCfRIv33AhntOGhoj9vYDP6HdnvOYEEwsHlGF1gPE19ENijh83GqNaTIIsAJwz1dV-Koif8lzermpaV0Qsy2FnWyzorEKEv4aZ5kOxcWrOdCcyGzhA7jKdK--vI6suIUxPeKho2w_mrkNlWv4Tk_g9Y0NwVhy6IRYpsLtOJsCyUEdcLiIxhf9-VBAgR1EOxM6913Mgo3AaCHmlAAPBzFcued4yMrynbRnlRo3maHjS5T0h2FKRvj_Sedi6jX1v1QNKhg

输入token
点击登录显示如下页面