1.dashboard可视化界面

1.下载yaml

  1. wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.2.0/aio/deploy/recommended.yaml
  1. # Copyright 2017 The Kubernetes Authors.
  2. #
  3. # Licensed under the Apache License, Version 2.0 (the "License");
  4. # you may not use this file except in compliance with the License.
  5. # You may obtain a copy of the License at
  6. #
  7. #     http://www.apache.org/licenses/LICENSE-2.0
  8. #
  9. # Unless required by applicable law or agreed to in writing, software
  10. # distributed under the License is distributed on an "AS IS" BASIS,
  11. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. # See the License for the specific language governing permissions and
  13. # limitations under the License.
  15. apiVersion: v1
  16. kind: Namespace
  17. metadata:
  18.   name: kubernetes-dashboard
  20. ---
  22. apiVersion: v1
  23. kind: ServiceAccount
  24. metadata:
  25.   labels:
  26.     k8s-app: kubernetes-dashboard
  27.   name: kubernetes-dashboard
  28.   namespace: kubernetes-dashboard
  30. ---
  32. kind: Service
  33. apiVersion: v1
  34. metadata:
  35.   labels:
  36.     k8s-app: kubernetes-dashboard
  37.   name: kubernetes-dashboard
  38.   namespace: kubernetes-dashboard
  39. spec:
  40.   type: NodePort
  41.   ports:
  42.     - port: 443
  43.       targetPort: 8443
  44.   selector:
  45.     k8s-app: kubernetes-dashboard
  47. ---
  49. apiVersion: v1
  50. kind: Secret
  51. metadata:
  52.   labels:
  53.     k8s-app: kubernetes-dashboard
  54.   name: kubernetes-dashboard-certs
  55.   namespace: kubernetes-dashboard
  56. type: Opaque
  58. ---
  60. apiVersion: v1
  61. kind: Secret
  62. metadata:
  63.   labels:
  64.     k8s-app: kubernetes-dashboard
  65.   name: kubernetes-dashboard-csrf
  66.   namespace: kubernetes-dashboard
  67. type: Opaque
  68. data:
  69.   csrf: ""
  71. ---
  73. apiVersion: v1
  74. kind: Secret
  75. metadata:
  76.   labels:
  77.     k8s-app: kubernetes-dashboard
  78.   name: kubernetes-dashboard-key-holder
  79.   namespace: kubernetes-dashboard
  80. type: Opaque
  82. ---
  84. kind: ConfigMap
  85. apiVersion: v1
  86. metadata:
  87.   labels:
  88.     k8s-app: kubernetes-dashboard
  89.   name: kubernetes-dashboard-settings
  90.   namespace: kubernetes-dashboard
  92. ---
  94. kind: Role
  95. apiVersion: rbac.authorization.k8s.io/v1
  96. metadata:
  97.   labels:
  98.     k8s-app: kubernetes-dashboard
  99.   name: kubernetes-dashboard
  100.   namespace: kubernetes-dashboard
  101. rules:
  102.   # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
  103.   - apiGroups: [""]
  104.     resources: ["secrets"]
  105.     resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
  106.     verbs: ["get", "update", "delete"]
  107.     # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
  108.   - apiGroups: [""]
  109.     resources: ["configmaps"]
  110.     resourceNames: ["kubernetes-dashboard-settings"]
  111.     verbs: ["get", "update"]
  112.     # Allow Dashboard to get metrics.
  113.   - apiGroups: [""]
  114.     resources: ["services"]
  115.     resourceNames: ["heapster", "dashboard-metrics-scraper"]
  116.     verbs: ["proxy"]
  117.   - apiGroups: [""]
  118.     resources: ["services/proxy"]
  119.     resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
  120.     verbs: ["get"]
  122. ---
  124. kind: ClusterRole
  125. apiVersion: rbac.authorization.k8s.io/v1
  126. metadata:
  127.   labels:
  128.     k8s-app: kubernetes-dashboard
  129.   name: kubernetes-dashboard
  130. rules:
  131.   # Allow Metrics Scraper to get metrics from the Metrics server
  132.   - apiGroups: ["metrics.k8s.io"]
  133.     resources: ["pods", "nodes"]
  134.     verbs: ["get", "list", "watch"]
  136. ---
  138. apiVersion: rbac.authorization.k8s.io/v1
  139. kind: RoleBinding
  140. metadata:
  141.   labels:
  142.     k8s-app: kubernetes-dashboard
  143.   name: kubernetes-dashboard
  144.   namespace: kubernetes-dashboard
  145. roleRef:
  146.   apiGroup: rbac.authorization.k8s.io
  147.   kind: Role
  148.   name: kubernetes-dashboard
  149. subjects:
  150.   - kind: ServiceAccount
  151.     name: kubernetes-dashboard
  152.     namespace: kubernetes-dashboard
  154. ---
  156. apiVersion: rbac.authorization.k8s.io/v1
  157. kind: ClusterRoleBinding
  158. metadata:
  159.   name: kubernetes-dashboard
  160. roleRef:
  161.   apiGroup: rbac.authorization.k8s.io
  162.   kind: ClusterRole
  163.   name: kubernetes-dashboard
  164. subjects:
  165.   - kind: ServiceAccount
  166.     name: kubernetes-dashboard
  167.     namespace: kubernetes-dashboard
  169. ---
  171. kind: Deployment
  172. apiVersion: apps/v1
  173. metadata:
  174.   labels:
  175.     k8s-app: kubernetes-dashboard
  176.   name: kubernetes-dashboard
  177.   namespace: kubernetes-dashboard
  178. spec:
  179.   replicas: 1
  180.   revisionHistoryLimit: 10
  181.   selector:
  182.     matchLabels:
  183.       k8s-app: kubernetes-dashboard
  184.   template:
  185.     metadata:
  186.       labels:
  187.         k8s-app: kubernetes-dashboard
  188.     spec:
  189.       containers:
  190.         - name: kubernetes-dashboard
  191.           image: kubernetesui/dashboard:v2.2.0
  192.           imagePullPolicy: Always
  193.           ports:
  194.             - containerPort: 8443
  195.               protocol: TCP
  196.           args:
  197.             - --auto-generate-certificates
  198.             - --namespace=kubernetes-dashboard
  199.             # Uncomment the following line to manually specify Kubernetes API server Host
  200.             # If not specified, Dashboard will attempt to auto discover the API server and connect
  201.             # to it. Uncomment only if the default does not work.
  202.             # - --apiserver-host=http://my-address:port
  203.           volumeMounts:
  204.             - name: kubernetes-dashboard-certs
  205.               mountPath: /certs
  206.               # Create on-disk volume to store exec logs
  207.             - mountPath: /tmp
  208.               name: tmp-volume
  209.           livenessProbe:
  210.             httpGet:
  211.               scheme: HTTPS
  212.               path: /
  213.               port: 8443
  214.             initialDelaySeconds: 30
  215.             timeoutSeconds: 30
  216.           securityContext:
  217.             allowPrivilegeEscalation: false
  218.             readOnlyRootFilesystem: true
  219.             runAsUser: 1001
  220.             runAsGroup: 2001
  221.       volumes:
  222.         - name: kubernetes-dashboard-certs
  223.           secret:
  224.             secretName: kubernetes-dashboard-certs
  225.         - name: tmp-volume
  226.           emptyDir: {}
  227.       serviceAccountName: kubernetes-dashboard
  228.       nodeSelector:
  229.         "kubernetes.io/os": linux
  230.       # Comment the following tolerations if Dashboard must not be deployed on master
  231.       tolerations:
  232.         - key: node-role.kubernetes.io/master
  233.           effect: NoSchedule
  235. ---
  237. kind: Service
  238. apiVersion: v1
  239. metadata:
  240.   labels:
  241.     k8s-app: dashboard-metrics-scraper
  242.   name: dashboard-metrics-scraper
  243.   namespace: kubernetes-dashboard
  244. spec:
  245.   ports:
  246.     - port: 8000
  247.       targetPort: 8000
  248.   selector:
  249.     k8s-app: dashboard-metrics-scraper
  251. ---
  253. kind: Deployment
  254. apiVersion: apps/v1
  255. metadata:
  256.   labels:
  257.     k8s-app: dashboard-metrics-scraper
  258.   name: dashboard-metrics-scraper
  259.   namespace: kubernetes-dashboard
  260. spec:
  261.   replicas: 1
  262.   revisionHistoryLimit: 10
  263.   selector:
  264.     matchLabels:
  265.       k8s-app: dashboard-metrics-scraper
  266.   template:
  267.     metadata:
  268.       labels:
  269.         k8s-app: dashboard-metrics-scraper
  270.       annotations:
  271.         seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
  272.     spec:
  273.       containers:
  274.         - name: dashboard-metrics-scraper
  275.           image: kubernetesui/metrics-scraper:v1.0.6
  276.           ports:
  277.             - containerPort: 8000
  278.               protocol: TCP
  279.           livenessProbe:
  280.             httpGet:
  281.               scheme: HTTP
  282.               path: /
  283.               port: 8000
  284.             initialDelaySeconds: 30
  285.             timeoutSeconds: 30
  286.           volumeMounts:
  287.           - mountPath: /tmp
  288.             name: tmp-volume
  289.           securityContext:
  290.             allowPrivilegeEscalation: false
  291.             readOnlyRootFilesystem: true
  292.             runAsUser: 1001
  293.             runAsGroup: 2001
  294.       serviceAccountName: kubernetes-dashboard
  295.       nodeSelector:
  296.         "kubernetes.io/os": linux
  297.       # Comment the following tolerations if Dashboard must not be deployed on master
  298.       tolerations:
  299.         - key: node-role.kubernetes.io/master
  300.           effect: NoSchedule
  301.       volumes:
  302.         - name: tmp-volume
  303.           emptyDir: {}

2.修改service类型
image.png
3.执行yaml
kubectl apply -f recommended.yaml

2.metrics-server监控服务安装

1.metrics-server.yaml

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: system:aggregated-metrics-reader
  labels:
    rbac.authorization.k8s.io/aggregate-to-view: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
rules:
- apiGroups: ["metrics.k8s.io"]
  resources: ["pods", "nodes"]
  verbs: ["get", "list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: metrics-server:system:auth-delegator
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:auth-delegator
subjects:
- kind: ServiceAccount
  name: metrics-server
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: metrics-server-auth-reader
  namespace: kube-system
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
  name: metrics-server
  namespace: kube-system
---
apiVersion: apiregistration.k8s.io/v1beta1
kind: APIService
metadata:
  name: v1beta1.metrics.k8s.io
spec:
  service:
    name: metrics-server
    namespace: kube-system
  group: metrics.k8s.io
  version: v1beta1
  insecureSkipTLSVerify: true
  groupPriorityMinimum: 100
  versionPriority: 100
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: metrics-server
  namespace: kube-system
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: metrics-server
  namespace: kube-system
  labels:
    k8s-app: metrics-server
spec:
  selector:
    matchLabels:
      k8s-app: metrics-server
  template:
    metadata:
      name: metrics-server
      labels:
        k8s-app: metrics-server
    spec:
      serviceAccountName: metrics-server
      volumes:
      # mount in tmp so we can safely use from-scratch images and/or read-only containers
      - name: tmp-dir
        emptyDir: {}
      containers:
      - name: metrics-server
        image: lizhenliang/metrics-server:v0.3.7 
        imagePullPolicy: IfNotPresent
        args:
          - --cert-dir=/tmp
          - --secure-port=4443
          - --kubelet-insecure-tls
          - --kubelet-preferred-address-types=InternalIP
        ports:
        - name: main-port
          containerPort: 4443
          protocol: TCP
        securityContext:
          readOnlyRootFilesystem: true
          runAsNonRoot: true
          runAsUser: 1000
        volumeMounts:
        - name: tmp-dir
          mountPath: /tmp
      nodeSelector:
        kubernetes.io/os: linux
        kubernetes.io/arch: "amd64"
---
apiVersion: v1
kind: Service
metadata:
  name: metrics-server
  namespace: kube-system
  labels:
    kubernetes.io/name: "Metrics-server"
    kubernetes.io/cluster-service: "true"
spec:
  selector:
    k8s-app: metrics-server
  ports:
  - port: 443
    protocol: TCP
    targetPort: main-port
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: system:metrics-server
rules:
- apiGroups:
  - ""
  resources:
  - pods
  - nodes
  - nodes/stats
  - namespaces
  - configmaps
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: system:metrics-server
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:metrics-server
subjects:
- kind: ServiceAccount
  name: metrics-server
  namespace: kube-system

2.执行yaml
kubectl apply -f metrics-server.yaml
3.查看指标
kubectl top node
kubectl top pod
image.png

3.kubectl命令补全

yum -y install bash-completion
bash
source <(kubectl completion bash)