使用kubeadm部署kubernetes v1.23.5 - 图1 kubeadm

准备工作

  • 满足安装 Docker 项目所需的要求，比如 64 位的 Linux 操作系统、3.10 及以上的内核版本；CentOS 7.8.2003
  • x86 或者 ARM 架构均可；
  • 机器之间网络互通，这是容器之间网络互通的前提；
  • 能够访问到gcr.io、quay.io这两个 docker registry，或者使用国内镜像源；
  • 单机可用资源建议 2 核 CPU、8 GB 内存或以上，4核8G内存；
  • 30 GB 或以上的可用磁盘空间，这主要是留给 Docker 镜像和日志文件用。

环境预设

master 和 worker 节点

关闭 iptables 和 内核依赖

通过 lsmod | grep br_netfilter 确认 br_netfilter 是否存在。
由于 iptables 被绕过而导致流量无法正确路由的问题。应该确保 在 sysctl 配置中的 net.bridge.bridge-nf-call-iptables 被设置为 1。

  1. cat << EOF | tee /etc/modules-load.d/k8s.conf
  2. br_netfilter
  3. EOF
  5. # 关闭防火墙
  6. systemctl stop firewalld && systemctl disable firewalld
  8. cat << EOF | tee /etc/sysctl.d/k8s.conf
  9. net.bridge.bridge-nf-call-ip6tables = 1
  10. net.bridge.bridge-nf-call-iptables = 1
  11. net.ipv4.ip_forward = 1
  12. EOF
  14. sysctl --system

执行sysctl -p 时出现如下报错，应执行 modprobe br_netfilter ，加载相应的模块。

  1. # sysctl -p
  2. sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-ip6tables: No such file or directory
  3. sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: No such file or directory

设置selinux

  1. # 将 SELinux 设置为 permissive 模式（相当于将其禁用）
  2. setenforce 0
  3. sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config

关闭swap

先通过free查看有无swap

  1. swapoff -a
  2. sed -i "s/\/dev\/mapper\/centos-swap/\#\/dev\/mapper\/centos-swap/g" /etc/fstab

端口检查

以下端口会用到
image.png
检测命令

  1. netstat -ant | egrep "6433|2379|2380|10250|10251|10252";for port in {30000..32767}; do netstat -antp | grep $port; done

部署docker

master 和 worker 节点

安装docker

  1. # 配置yum源
  2. wget -O /etc/yum.repos.d/docker-ce.repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
  4. # 安装
  5. yum makecache
  6. yum install docker-ce -y

docker配置更改（更改镜像源）

  1. mkdir -p /etc/docker
  3. cat << EOF | tee /etc/docker/daemon.json
  4. {
  5.     "registry-mirrors": ["https://5twf62k1.mirror.aliyuncs.com"],
  6.     "exec-opts": ["native.cgroupdriver=systemd"]
  7. }
  8. EOF
  10. systemctl daemon-reload
  11. systemctl enable docker && systemctl restart docker

检查确认docker的Cgroup Driver信息

  1. docker info | grep Cgroup
  2.  Cgroup Driver: systemd

部署kubeadm

master 和 worker 节点

通过阿里源安装kubeadm

  1. cat << EOF | tee /etc/yum.repos.d/kubernetes.repo
  2. [kubernetes]
  3. name=Kubernetes
  4. baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
  5. enabled=1
  6. gpgcheck=0
  7. EOF
  9. yum makecache
  11. yum install -y kubeadm kubelet kubectl
  12. systemctl enable kubelet

注意，这里不需要启动kubelet，初始化的过程中会自动启动的，如果此时启动了会出现如下报错，忽略即可。日志在tail -f /var/log/messages

  1. failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file “/var/lib/kubelet/config.yaml”, error: open /var/lib/kubelet/config.yaml: no such file or directory

在master节点初始化集群

master 节点

  1. [root@vm101 ~]# kubeadm init --kubernetes-version v1.23.5 --image-repository registry.aliyuncs.com/google_containers --pod-network-cidr=192.168.0.0/16
  2. [init] Using Kubernetes version: v1.23.5
  3. [preflight] Running pre-flight checks
  4. [preflight] Pulling images required for setting up a Kubernetes cluster
  5. [preflight] This might take a minute or two, depending on the speed of your internet connection
  6. [preflight] You can also perform this action in beforehand using 'kubeadm config images pull'
  7. [certs] Using certificateDir folder "/etc/kubernetes/pki"                                  [certs] Generating "ca" certificate and key
  8. [certs] Generating "apiserver" certificate and key
  9. [certs] apiserver serving cert is signed for DNS names [kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local vm101] and IPs [10.96.0.1 192.168.164.101]
  10. [certs] Generating "apiserver-kubelet-client" certificate and key
  11. [certs] Generating "front-proxy-ca" certificate and key
  12. [certs] Generating "front-proxy-client" certificate and key
  13. [certs] Generating "etcd/ca" certificate and key
  14. [certs] Generating "etcd/server" certificate and key
  15. [certs] etcd/server serving cert is signed for DNS names [localhost vm101] and IPs [192.168.164.101 127.0.0.1 ::1]
  16. [certs] Generating "etcd/peer" certificate and key
  17. [certs] etcd/peer serving cert is signed for DNS names [localhost vm101] and IPs [192.168.164.101 127.0.0.1 ::1]
  18. [certs] Generating "etcd/healthcheck-client" certificate and key
  19. [certs] Generating "apiserver-etcd-client" certificate and key
  20. [certs] Generating "sa" key and public key
  21. [kubeconfig] Using kubeconfig folder "/etc/kubernetes"
  22. [kubeconfig] Writing "admin.conf" kubeconfig file
  23. [kubeconfig] Writing "kubelet.conf" kubeconfig file
  24. [kubeconfig] Writing "controller-manager.conf" kubeconfig file
  25. [kubeconfig] Writing "scheduler.conf" kubeconfig file
  26. [kubelet-start] Writing kubelet environment file with flags to file "/var/lib/kubelet/kubeadm-flags.env"
  27. [kubelet-start] Writing kubelet configuration to file "/var/lib/kubelet/config.yaml"
  28. [kubelet-start] Starting the kubelet
  29. [control-plane] Using manifest folder "/etc/kubernetes/manifests"
  30. [control-plane] Creating static Pod manifest for "kube-apiserver"
  31. [control-plane] Creating static Pod manifest for "kube-controller-manager"
  32. [control-plane] Creating static Pod manifest for "kube-scheduler"
  33. [etcd] Creating static Pod manifest for local etcd in "/etc/kubernetes/manifests"
  34. [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory "/etc/kubernetes/manifests". This can take up to 4m0s
  35. [apiclient] All control plane components are healthy after 8.003873 seconds
  36. [upload-config] Storing the configuration used in ConfigMap "kubeadm-config" in the "kube-system" Namespace
  37. [kubelet] Creating a ConfigMap "kubelet-config-1.23" in namespace kube-system with the configuration for the kubelets in the cluster
  38. NOTE: The "kubelet-config-1.23" naming of the kubelet ConfigMap is deprecated. Once the UnversionedKubeletConfigMap feature gate graduates to Beta the default name will become just "kubelet-config". Kubeadm upgrade will handle this transition transparently.
  39. [upload-certs] Skipping phase. Please see --upload-certs
  40. [mark-control-plane] Marking the node vm101 as control-plane by adding the labels: [node-role.kubernetes.io/master(deprecated) node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]
  41. [mark-control-plane] Marking the node vm101 as control-plane by adding the taints [node-role.kubernetes.io/master:NoSchedule]
  42. [bootstrap-token] Using token: 33zoxw.pe89zkpj7xxqtkwb
  43. [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles
  44. [bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to get nodes
  45. [bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials
  46. [bootstrap-token] configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token
  47. [bootstrap-token] configured RBAC rules to allow certificate rotation for all node client certificates in the cluster
  48. [bootstrap-token] Creating the "cluster-info" ConfigMap in the "kube-public" namespace
  49. [kubelet-finalize] Updating "/etc/kubernetes/kubelet.conf" to point to a rotatable kubelet client certificate and key
  50. [addons] Applied essential addon: CoreDNS
  51. [addons] Applied essential addon: kube-proxy
  53. Your Kubernetes control-plane has initialized successfully!
  55. To start using your cluster, you need to run the following as a regular user:
  57.   mkdir -p $HOME/.kube
  58.   sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  59.   sudo chown $(id -u):$(id -g) $HOME/.kube/config
  61. Alternatively, if you are the root user, you can run:
  63.   export KUBECONFIG=/etc/kubernetes/admin.conf
  65. You should now deploy a pod network to the cluster.
  66. Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
  67.   https://kubernetes.io/docs/concepts/cluster-administration/addons/
  69. Then you can join any number of worker nodes by running the following on each as root:
  71. kubeadm join 192.168.164.101:6443 --token 33zoxw.pe89zkpj7xxqtkwb \
  72.     --discovery-token-ca-cert-hash sha256:807c71f97709d1422aed4ca2d6f9f014c9229a74dc5d73b5f1271425a725b000

注意：初始化之后会安装网络插件，这里选择了calico，所以修改 —pod-network-cidr=192.168.0.0/16

以上输出显示初始化成功，并给出了接下来的必要步骤和节点加入集群的命令

  1.   mkdir -p $HOME/.kube
  2.   sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  3.   sudo chown $(id -u):$(id -g) $HOME/.kube/config

查看nodes

  1. [root@vm101 ~]# kubectl get nodes
  2. NAME    STATUS     ROLES                  AGE     VERSION
  3. vm101   NotReady   control-plane,master   3m21s   v1.23.5

查看已经运行的pod

  1. [root@vm101 ~]# kubectl get pod -n kube-system -o wide
  2. NAME                            READY   STATUS    RESTARTS   AGE     IP                NODE     NOMINATED NODE   READINESS GATES
  3. coredns-6d8c4cb4d-h5shn         0/1     Pending   0          4m22s   <none>            <none>   <none>           <none>
  4. coredns-6d8c4cb4d-qkmtk         0/1     Pending   0          4m22s   <none>            <none>   <none>           <none>
  5. etcd-vm101                      1/1     Running   0          4m36s   192.168.164.101   vm101    <none>           <none>
  6. kube-apiserver-vm101            1/1     Running   0          4m38s   192.168.164.101   vm101    <none>           <none>
  7. kube-controller-manager-vm101   1/1     Running   0          4m36s   192.168.164.101   vm101    <none>           <none>
  8. kube-proxy-vm7hh                1/1     Running   0          4m22s   192.168.164.101   vm101    <none>           <none>
  9. kube-scheduler-vm101            1/1     Running   0          4m36s   192.168.164.101   vm101    <none>           <none>

到这里，会发现除了coredns未ready，这是正常的，因为还没有网络插件，接下来安装calico后就变为正常running了。

部署容器网络插件calico

quickstart

master

  1. wget https://projectcalico.docs.tigera.io/manifests/tigera-operator.yaml --no-check-certificate
  3. [root@ty01 k8s_install]# kubectl apply -f tigera-operator.yaml
  4. customresourcedefinition.apiextensions.k8s.io/bgpconfigurations.crd.projectcalico.org created
  5. customresourcedefinition.apiextensions.k8s.io/bgppeers.crd.projectcalico.org created
  6. customresourcedefinition.apiextensions.k8s.io/blockaffinities.crd.projectcalico.org created
  7. customresourcedefinition.apiextensions.k8s.io/caliconodestatuses.crd.projectcalico.org created
  8. customresourcedefinition.apiextensions.k8s.io/clusterinformations.crd.projectcalico.org created
  9. customresourcedefinition.apiextensions.k8s.io/felixconfigurations.crd.projectcalico.org created
  10. customresourcedefinition.apiextensions.k8s.io/globalnetworkpolicies.crd.projectcalico.org created
  11. customresourcedefinition.apiextensions.k8s.io/globalnetworksets.crd.projectcalico.org created
  12. customresourcedefinition.apiextensions.k8s.io/hostendpoints.crd.projectcalico.org created
  13. customresourcedefinition.apiextensions.k8s.io/ipamblocks.crd.projectcalico.org created
  14. customresourcedefinition.apiextensions.k8s.io/ipamconfigs.crd.projectcalico.org created
  15. customresourcedefinition.apiextensions.k8s.io/ipamhandles.crd.projectcalico.org created
  16. customresourcedefinition.apiextensions.k8s.io/ippools.crd.projectcalico.org created
  17. customresourcedefinition.apiextensions.k8s.io/ipreservations.crd.projectcalico.org created
  18. customresourcedefinition.apiextensions.k8s.io/kubecontrollersconfigurations.crd.projectcalico.org created
  19. customresourcedefinition.apiextensions.k8s.io/networkpolicies.crd.projectcalico.org created
  20. customresourcedefinition.apiextensions.k8s.io/networksets.crd.projectcalico.org created
  21. customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io created
  22. customresourcedefinition.apiextensions.k8s.io/imagesets.operator.tigera.io created
  23. customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io created
  24. customresourcedefinition.apiextensions.k8s.io/tigerastatuses.operator.tigera.io created
  25. namespace/tigera-operator created
  26. Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
  27. podsecuritypolicy.policy/tigera-operator created
  28. serviceaccount/tigera-operator created
  29. clusterrole.rbac.authorization.k8s.io/tigera-operator created
  30. clusterrolebinding.rbac.authorization.k8s.io/tigera-operator created
  31. deployment.apps/tigera-operator created
  33. wget https://projectcalico.docs.tigera.io/manifests/custom-resources.yaml --no-check-certificate
  35. [root@ty01 k8s_install]# kubectl apply -f custom-resources.yaml
  36. installation.operator.tigera.io/default created
  37. apiserver.operator.tigera.io/default created

安装后的pod状态

  1. [root@ty01 k8s_install]# watch kubectl get pods -n calico-system
  2. NAME                                       READY   STATUS    RESTARTS   AGE
  3. calico-kube-controllers-67f85d7449-sm576   1/1     Running   0          3m42s
  4. calico-node-gtl54                          1/1     Running   0          3m42s
  5. calico-typha-764b47759b-nv85l              1/1     Running   0          3m42s
  7. [root@ty01 k8s_install]# kubectl get pods -n kube-system
  8. NAME                           READY   STATUS    RESTARTS        AGE
  9. coredns-6d8c4cb4d-fdctj        1/1     Running   0               10m
  10. coredns-6d8c4cb4d-mmncc        1/1     Running   0               10m
  11. etcd-ty01                      1/1     Running   0               10m
  12. kube-apiserver-ty01            1/1     Running   0               10m
  13. kube-controller-manager-ty01   1/1     Running   1 (2m54s ago)   10m
  14. kube-proxy-p9flv               1/1     Running   0               10m
  15. kube-scheduler-ty01            1/1     Running   1 (2m54s ago)   10m

需要2到3分钟，等待所有status都是RUNNING状态

部署容器网络插件Weave

网络插件Flannel、Calico、Canal、Romana，Weave 选其一部署即可。

部署 Weave

  1. $ kubectl apply -f https://git.io/weave-kube-1.6

系统 Pod 都成功启动了，刚刚部署的 Weave 网络插件则在 kube-system 下面新建了一个名叫 weave-net-cmk27 的 Pod，一般来说，这些 Pod 就是容器网络插件在每个节点上的控制组件。

将worker节点加进集群

worker 节点

  1. kubeadm join 10.0.2.15:6443 --token 54obu2.g57q3k9l28k14d0h \
  2.     --discovery-token-ca-cert-hash sha256:fe84d63faa657ce33a9cab759fa2725a257caa3d2f2c3835023330c8aba02d97

token 过期后执行 join会卡主，可在master上重新获取token

  1. # 创建token
  2. kubeadm token create
  3. # 列举token
  4. kubeadm token list
  5. # 获取ca证书sha256编码hash值
  6. kubernetes]# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'

更简单的办法

  1. [root@node1 ~]# kubeadm token create --print-join-command
  2. W0715 17:06:52.987996   20390 configset.go:202] WARNING: kubeadm cannot validate component configs for API groups [kubelet.config.k8s.io kubeproxy.config.k8s.io]
  3. kubeadm join 10.0.2.15:6443 --token 0uop7i.0tfgtr2qdr92zffn     --discovery-token-ca-cert-hash sha256:fe84d63faa657ce33a9cab759fa2725a257caa3d2f2c3835023330c8aba02d97

部署 Dashboard 可视化插件

使用kubeadm部署kubernetes v1.23.5 - 图3 Dashboard

在 Kubernetes 社区中，有一个很受欢迎的 Dashboard 项目，它可以给用户提供一个可视化的 Web 界面来查看当前集群的各种信息。

  1. wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.3/aio/deploy/recommended.yaml

更改两行

  1.       containers:
  2.         - name: kubernetes-dashboard
  3.           image: kubernetesui/dashboard:v2.5.1
  4.           imagePullPolicy: Always
  5.           ports:
  6.             - containerPort: 8443
  7.               protocol: TCP
  8.           args:
  9.             - --auto-generate-certificates
  10.             - --namespace=kubernetes-dashboard
  11.             - --tls-key-file=apiserver.key      # modify
  12.             - --tls-cert-file=apiserver.crt     # modify
  1. kubectl apply -f recommended.yaml

查看Dashboard 对应的 Pod 的状态

  1. kubectl get pods -n kubernetes-dashboard
  2. NAME                                         READY   STATUS    RESTARTS   AGE
  3. dashboard-metrics-scraper-6b4884c9d5-ch5cp   1/1     Running   0          7m53s
  4. kubernetes-dashboard-7f99b75bf4-8nwt8        1/1     Running   0          7m53s

1.7 版本之后的 Dashboard 项目部署完成后，默认不能直接访问dashboard。官方提供了多种方式方式。

proxy 的方式在本地访问

在master上启动代理

  1. $ kubectl proxy
  2. Starting to serve on 127.0.0.1:8001

访问链接如下

  1. http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/

NodePort

在开发环境推荐使用这种方式。

  1. kubectl -n kubernetes-dashboard edit service kubernetes-dashboard

将 type: ClusterIP 改为 type: NodePort

  1. kubectl -n kubernetes-dashboard get service kubernetes-dashboard
  2. NAME                   TYPE       CLUSTER-IP       EXTERNAL-IP   PORT(S)         AGE
  3. kubernetes-dashboard   NodePort   10.110.231.120   <none>        443:30227/TCP   3h1m

访问链接，也可以使用 kubectl cluster-info 查看访问链接。

  1. https://<master_ip>:30227

生成访问dashboard的token

创建admin-role.yaml文件

  1. # 创建服务账户
  2. [root@ty01 k8s_install]# cat admin-user.yaml
  3. ---
  4. apiVersion: v1
  5. kind: ServiceAccount
  6. metadata:
  7.   name: admin-user
  8.   namespace: kubernetes-dashboard
  10. [root@ty01 k8s_install]# kubectl apply -f admin-user.yaml
  11. serviceaccount/admin-user created
  13. # 创建一个ClusterRoleBinding
  14. [root@ty01 k8s_install]# cat cluster-role-binding.yaml
  15. ---
  16. apiVersion: rbac.authorization.k8s.io/v1
  17. kind: ClusterRoleBinding
  18. metadata:
  19.   name: admin-user
  20. roleRef:
  21.   apiGroup: rbac.authorization.k8s.io
  22.   kind: ClusterRole
  23.   name: cluster-admin
  24. subjects:
  25. - kind: ServiceAccount
  26.   name: admin-user
  27.   namespace: kubernetes-dashboard
  29. [root@ty01 k8s_install]# kubectl apply -f cluster-role-binding.yaml
  30. clusterrolebinding.rbac.authorization.k8s.io/admin-user created

创建完成后获取secret中token的值

  1. # 获取admin-token的secret名字
  2. kubectl -n kube-system get secret | grep admin-token
  3. admin-token-xcw7m                                kubernetes.io/service-account-token   3      24m
  4. # 获取token的值
  5. kubectl -n kube-system describe secret admin-token-xcw7m
  6. Name:         admin-token-xcw7m
  7. Namespace:    kube-system
  8. Labels:       <none>
  9. Annotations:  kubernetes.io/service-account.name: admin
  10.               kubernetes.io/service-account.uid: f96e4bfd-0d12-43ff-999f-188ee561d849
  12. Type:  kubernetes.io/service-account-token
  14. Data
  15. ====
  16. ca.crt:     1025 bytes
  17. namespace:  11 bytes
  18. token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IjVxa3BEQWRoQ2JseGZydmVlekNITlAxdVNDRzU0T3RWWEd5SC1KMGZFT2cifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi10b2tlbi14Y3c3bSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJhZG1pbiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6ImY5NmU0YmZkLTBkMTItNDNmZi05OTlmLTE4OGVlNTYxZDg0OSIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDprdWJlLXN5c3RlbTphZG1pbiJ9.eE3isGA1aq8au0Seuu9cJJyNPm9szrC4rF4dDAtAfu99fKBaYk_aoHEkysbHspOWrHkogG-7NA2w6AC_tx15IRGvv7-W3AGE8yJvd14mjryjgjVKyfBWxdwDpBGtHPUKw2OS7Gy2Q4ZlaUvws2lfkIZCUuP-BJqJjHDsolG7IbvutsKtcdEyX9VoCUsvUn4FFPQTRnAT8ODc4CawuwfVe8KBsKpNfJ-3-dkwIiz-IbbPSAnC_UUAPCx7RCwGFahql6vh-7XbFBgBFcs_snx406FZXj29p0yMo8igvaLj1D-lto8773oDIylcjtm5OK0OcyrnPb1EZT0zPGtVXGczxQ

也可以使用 jsonpath 的方式直接获取 token 的值，如：

  1. kubectl -n kube-system get secret admin-token-xcw7m -o jsonpath={.data.token} | base64 -d

还可以用这个命令

  1. kubectl -n kube-system describe $(kubectl -n kube-system get secret -n kube-system -o name | grep namespace) | grep token

或者

  1. kubectl -n kubernetes-dashboard get secret $(kubectl -n kubernetes-dashboard get sa/admin-user -o jsonpath="{.secrets[0].name}") -o go-template="{{.data.token | base64decode}}"

使用 kubeconfig 或 token 进行用户身份认证 Kubernetes-dashboard的身份认证 创建用户认证授权的kubeconfig文件 create_user K8S dashboard 2.0 安装配置并使用 ingress-nginx 访问 Kubernetes dashboard 通过 Ingress 提供HTTPS访问 kubernetes dashboard 您的连接不是私密连接 问题处理 安装dashboard

使用上面获取的token进行登录。
image.png

参考

  1. centos7使用kubeadm安装部署kubernetes 1.14
  2. Pod 一直处于 ImagePullBackOff 状态
  3. kubeadm 高可用K8S
  4. kubeadm安装kubernetes1.13集群
  5. Kubernetes taints 配置
  6. centos 部署k8s
  7. k8s-v1.23.5