1.dashboard可视化界面

1.下载yaml

  1. wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.2.0/aio/deploy/recommended.yaml
  1. # Copyright 2017 The Kubernetes Authors.
  2. #
  3. # Licensed under the Apache License, Version 2.0 (the "License");
  4. # you may not use this file except in compliance with the License.
  5. # You may obtain a copy of the License at
  6. #
  7. #     http://www.apache.org/licenses/LICENSE-2.0
  8. #
  9. # Unless required by applicable law or agreed to in writing, software
  10. # distributed under the License is distributed on an "AS IS" BASIS,
  11. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. # See the License for the specific language governing permissions and
  13. # limitations under the License.
  15. apiVersion: v1
  16. kind: Namespace
  17. metadata:
  18.   name: kubernetes-dashboard
  20. ---
  22. apiVersion: v1
  23. kind: ServiceAccount
  24. metadata:
  25.   labels:
  26.     k8s-app: kubernetes-dashboard
  27.   name: kubernetes-dashboard
  28.   namespace: kubernetes-dashboard
  30. ---
  32. kind: Service
  33. apiVersion: v1
  34. metadata:
  35.   labels:
  36.     k8s-app: kubernetes-dashboard
  37.   name: kubernetes-dashboard
  38.   namespace: kubernetes-dashboard
  39. spec:
  40.   type: NodePort
  41.   ports:
  42.     - port: 443
  43.       targetPort: 8443
  44.   selector:
  45.     k8s-app: kubernetes-dashboard
  47. ---
  49. apiVersion: v1
  50. kind: Secret
  51. metadata:
  52.   labels:
  53.     k8s-app: kubernetes-dashboard
  54.   name: kubernetes-dashboard-certs
  55.   namespace: kubernetes-dashboard
  56. type: Opaque
  58. ---
  60. apiVersion: v1
  61. kind: Secret
  62. metadata:
  63.   labels:
  64.     k8s-app: kubernetes-dashboard
  65.   name: kubernetes-dashboard-csrf
  66.   namespace: kubernetes-dashboard
  67. type: Opaque
  68. data:
  69.   csrf: ""
  71. ---
  73. apiVersion: v1
  74. kind: Secret
  75. metadata:
  76.   labels:
  77.     k8s-app: kubernetes-dashboard
  78.   name: kubernetes-dashboard-key-holder
  79.   namespace: kubernetes-dashboard
  80. type: Opaque
  82. ---
  84. kind: ConfigMap
  85. apiVersion: v1
  86. metadata:
  87.   labels:
  88.     k8s-app: kubernetes-dashboard
  89.   name: kubernetes-dashboard-settings
  90.   namespace: kubernetes-dashboard
  92. ---
  94. kind: Role
  95. apiVersion: rbac.authorization.k8s.io/v1
  96. metadata:
  97.   labels:
  98.     k8s-app: kubernetes-dashboard
  99.   name: kubernetes-dashboard
  100.   namespace: kubernetes-dashboard
  101. rules:
  102.   # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
  103.   - apiGroups: [""]
  104.     resources: ["secrets"]
  105.     resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
  106.     verbs: ["get", "update", "delete"]
  107.     # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
  108.   - apiGroups: [""]
  109.     resources: ["configmaps"]
  110.     resourceNames: ["kubernetes-dashboard-settings"]
  111.     verbs: ["get", "update"]
  112.     # Allow Dashboard to get metrics.
  113.   - apiGroups: [""]
  114.     resources: ["services"]
  115.     resourceNames: ["heapster", "dashboard-metrics-scraper"]
  116.     verbs: ["proxy"]
  117.   - apiGroups: [""]
  118.     resources: ["services/proxy"]
  119.     resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
  120.     verbs: ["get"]
  122. ---
  124. kind: ClusterRole
  125. apiVersion: rbac.authorization.k8s.io/v1
  126. metadata:
  127.   labels:
  128.     k8s-app: kubernetes-dashboard
  129.   name: kubernetes-dashboard
  130. rules:
  131.   # Allow Metrics Scraper to get metrics from the Metrics server
  132.   - apiGroups: ["metrics.k8s.io"]
  133.     resources: ["pods", "nodes"]
  134.     verbs: ["get", "list", "watch"]
  136. ---
  138. apiVersion: rbac.authorization.k8s.io/v1
  139. kind: RoleBinding
  140. metadata:
  141.   labels:
  142.     k8s-app: kubernetes-dashboard
  143.   name: kubernetes-dashboard
  144.   namespace: kubernetes-dashboard
  145. roleRef:
  146.   apiGroup: rbac.authorization.k8s.io
  147.   kind: Role
  148.   name: kubernetes-dashboard
  149. subjects:
  150.   - kind: ServiceAccount
  151.     name: kubernetes-dashboard
  152.     namespace: kubernetes-dashboard
  154. ---
  156. apiVersion: rbac.authorization.k8s.io/v1
  157. kind: ClusterRoleBinding
  158. metadata:
  159.   name: kubernetes-dashboard
  160. roleRef:
  161.   apiGroup: rbac.authorization.k8s.io
  162.   kind: ClusterRole
  163.   name: kubernetes-dashboard
  164. subjects:
  165.   - kind: ServiceAccount
  166.     name: kubernetes-dashboard
  167.     namespace: kubernetes-dashboard
  169. ---
  171. kind: Deployment
  172. apiVersion: apps/v1
  173. metadata:
  174.   labels:
  175.     k8s-app: kubernetes-dashboard
  176.   name: kubernetes-dashboard
  177.   namespace: kubernetes-dashboard
  178. spec:
  179.   replicas: 1
  180.   revisionHistoryLimit: 10
  181.   selector:
  182.     matchLabels:
  183.       k8s-app: kubernetes-dashboard
  184.   template:
  185.     metadata:
  186.       labels:
  187.         k8s-app: kubernetes-dashboard
  188.     spec:
  189.       containers:
  190.         - name: kubernetes-dashboard
  191.           image: kubernetesui/dashboard:v2.2.0
  192.           imagePullPolicy: Always
  193.           ports:
  194.             - containerPort: 8443
  195.               protocol: TCP
  196.           args:
  197.             - --auto-generate-certificates
  198.             - --namespace=kubernetes-dashboard
  199.             # Uncomment the following line to manually specify Kubernetes API server Host
  200.             # If not specified, Dashboard will attempt to auto discover the API server and connect
  201.             # to it. Uncomment only if the default does not work.
  202.             # - --apiserver-host=http://my-address:port
  203.           volumeMounts:
  204.             - name: kubernetes-dashboard-certs
  205.               mountPath: /certs
  206.               # Create on-disk volume to store exec logs
  207.             - mountPath: /tmp
  208.               name: tmp-volume
  209.           livenessProbe:
  210.             httpGet:
  211.               scheme: HTTPS
  212.               path: /
  213.               port: 8443
  214.             initialDelaySeconds: 30
  215.             timeoutSeconds: 30
  216.           securityContext:
  217.             allowPrivilegeEscalation: false
  218.             readOnlyRootFilesystem: true
  219.             runAsUser: 1001
  220.             runAsGroup: 2001
  221.       volumes:
  222.         - name: kubernetes-dashboard-certs
  223.           secret:
  224.             secretName: kubernetes-dashboard-certs
  225.         - name: tmp-volume
  226.           emptyDir: {}
  227.       serviceAccountName: kubernetes-dashboard
  228.       nodeSelector:
  229.         "kubernetes.io/os": linux
  230.       # Comment the following tolerations if Dashboard must not be deployed on master
  231.       tolerations:
  232.         - key: node-role.kubernetes.io/master
  233.           effect: NoSchedule
  235. ---
  237. kind: Service
  238. apiVersion: v1
  239. metadata:
  240.   labels:
  241.     k8s-app: dashboard-metrics-scraper
  242.   name: dashboard-metrics-scraper
  243.   namespace: kubernetes-dashboard
  244. spec:
  245.   ports:
  246.     - port: 8000
  247.       targetPort: 8000
  248.   selector:
  249.     k8s-app: dashboard-metrics-scraper
  251. ---
  253. kind: Deployment
  254. apiVersion: apps/v1
  255. metadata:
  256.   labels:
  257.     k8s-app: dashboard-metrics-scraper
  258.   name: dashboard-metrics-scraper
  259.   namespace: kubernetes-dashboard
  260. spec:
  261.   replicas: 1
  262.   revisionHistoryLimit: 10
  263.   selector:
  264.     matchLabels:
  265.       k8s-app: dashboard-metrics-scraper
  266.   template:
  267.     metadata:
  268.       labels:
  269.         k8s-app: dashboard-metrics-scraper
  270.       annotations:
  271.         seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
  272.     spec:
  273.       containers:
  274.         - name: dashboard-metrics-scraper
  275.           image: kubernetesui/metrics-scraper:v1.0.6
  276.           ports:
  277.             - containerPort: 8000
  278.               protocol: TCP
  279.           livenessProbe:
  280.             httpGet:
  281.               scheme: HTTP
  282.               path: /
  283.               port: 8000
  284.             initialDelaySeconds: 30
  285.             timeoutSeconds: 30
  286.           volumeMounts:
  287.           - mountPath: /tmp
  288.             name: tmp-volume
  289.           securityContext:
  290.             allowPrivilegeEscalation: false
  291.             readOnlyRootFilesystem: true
  292.             runAsUser: 1001
  293.             runAsGroup: 2001
  294.       serviceAccountName: kubernetes-dashboard
  295.       nodeSelector:
  296.         "kubernetes.io/os": linux
  297.       # Comment the following tolerations if Dashboard must not be deployed on master
  298.       tolerations:
  299.         - key: node-role.kubernetes.io/master
  300.           effect: NoSchedule
  301.       volumes:
  302.         - name: tmp-volume
  303.           emptyDir: {}

2.修改service类型
image.png
3.执行yaml
kubectl apply -f recommended.yaml

2.metrics-server监控服务安装

1.metrics-server.yaml

  1. ---
  2. apiVersion: rbac.authorization.k8s.io/v1
  3. kind: ClusterRole
  4. metadata:
  5.   name: system:aggregated-metrics-reader
  6.   labels:
  7.     rbac.authorization.k8s.io/aggregate-to-view: "true"
  8.     rbac.authorization.k8s.io/aggregate-to-edit: "true"
  9.     rbac.authorization.k8s.io/aggregate-to-admin: "true"
  10. rules:
  11. - apiGroups: ["metrics.k8s.io"]
  12.   resources: ["pods", "nodes"]
  13.   verbs: ["get", "list", "watch"]
  14. ---
  15. apiVersion: rbac.authorization.k8s.io/v1
  16. kind: ClusterRoleBinding
  17. metadata:
  18.   name: metrics-server:system:auth-delegator
  19. roleRef:
  20.   apiGroup: rbac.authorization.k8s.io
  21.   kind: ClusterRole
  22.   name: system:auth-delegator
  23. subjects:
  24. - kind: ServiceAccount
  25.   name: metrics-server
  26.   namespace: kube-system
  27. ---
  28. apiVersion: rbac.authorization.k8s.io/v1
  29. kind: RoleBinding
  30. metadata:
  31.   name: metrics-server-auth-reader
  32.   namespace: kube-system
  33. roleRef:
  34.   apiGroup: rbac.authorization.k8s.io
  35.   kind: Role
  36.   name: extension-apiserver-authentication-reader
  37. subjects:
  38. - kind: ServiceAccount
  39.   name: metrics-server
  40.   namespace: kube-system
  41. ---
  42. apiVersion: apiregistration.k8s.io/v1beta1
  43. kind: APIService
  44. metadata:
  45.   name: v1beta1.metrics.k8s.io
  46. spec:
  47.   service:
  48.     name: metrics-server
  49.     namespace: kube-system
  50.   group: metrics.k8s.io
  51.   version: v1beta1
  52.   insecureSkipTLSVerify: true
  53.   groupPriorityMinimum: 100
  54.   versionPriority: 100
  55. ---
  56. apiVersion: v1
  57. kind: ServiceAccount
  58. metadata:
  59.   name: metrics-server
  60.   namespace: kube-system
  61. ---
  62. apiVersion: apps/v1
  63. kind: Deployment
  64. metadata:
  65.   name: metrics-server
  66.   namespace: kube-system
  67.   labels:
  68.     k8s-app: metrics-server
  69. spec:
  70.   selector:
  71.     matchLabels:
  72.       k8s-app: metrics-server
  73.   template:
  74.     metadata:
  75.       name: metrics-server
  76.       labels:
  77.         k8s-app: metrics-server
  78.     spec:
  79.       serviceAccountName: metrics-server
  80.       volumes:
  81.       # mount in tmp so we can safely use from-scratch images and/or read-only containers
  82.       - name: tmp-dir
  83.         emptyDir: {}
  84.       containers:
  85.       - name: metrics-server
  86.         image: lizhenliang/metrics-server:v0.3.7 
  87.         imagePullPolicy: IfNotPresent
  88.         args:
  89.           - --cert-dir=/tmp
  90.           - --secure-port=4443
  91.           - --kubelet-insecure-tls
  92.           - --kubelet-preferred-address-types=InternalIP
  93.         ports:
  94.         - name: main-port
  95.           containerPort: 4443
  96.           protocol: TCP
  97.         securityContext:
  98.           readOnlyRootFilesystem: true
  99.           runAsNonRoot: true
  100.           runAsUser: 1000
  101.         volumeMounts:
  102.         - name: tmp-dir
  103.           mountPath: /tmp
  104.       nodeSelector:
  105.         kubernetes.io/os: linux
  106.         kubernetes.io/arch: "amd64"
  107. ---
  108. apiVersion: v1
  109. kind: Service
  110. metadata:
  111.   name: metrics-server
  112.   namespace: kube-system
  113.   labels:
  114.     kubernetes.io/name: "Metrics-server"
  115.     kubernetes.io/cluster-service: "true"
  116. spec:
  117.   selector:
  118.     k8s-app: metrics-server
  119.   ports:
  120.   - port: 443
  121.     protocol: TCP
  122.     targetPort: main-port
  123. ---
  124. apiVersion: rbac.authorization.k8s.io/v1
  125. kind: ClusterRole
  126. metadata:
  127.   name: system:metrics-server
  128. rules:
  129. - apiGroups:
  130.   - ""
  131.   resources:
  132.   - pods
  133.   - nodes
  134.   - nodes/stats
  135.   - namespaces
  136.   - configmaps
  137.   verbs:
  138.   - get
  139.   - list
  140.   - watch
  141. ---
  142. apiVersion: rbac.authorization.k8s.io/v1
  143. kind: ClusterRoleBinding
  144. metadata:
  145.   name: system:metrics-server
  146. roleRef:
  147.   apiGroup: rbac.authorization.k8s.io
  148.   kind: ClusterRole
  149.   name: system:metrics-server
  150. subjects:
  151. - kind: ServiceAccount
  152.   name: metrics-server
  153.   namespace: kube-system

2.执行yaml
kubectl apply -f metrics-server.yaml
3.查看指标
kubectl top node
kubectl top pod
image.png

3.kubectl命令补全

yum -y install bash-completion
bash
source <(kubectl completion bash)