1.下载镜像
#拉取镜像
docker pull mirrorgooglecontainers/kubernetes-dashboard-amd64:v1.10.1
#重新打标签
docker tag mirrorgooglecontainers/kubernetes-dashboard-amd64:v1.10.1 k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.1
#删除无用镜像
docker rmi mirrorgooglecontainers/kubernetes-dashboard-amd64:v1.10.1
2.下载dashboard资源请单
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml
vim kubernetes-dashboard.yaml
spec:
3.创建dashboard
查看dashboard的POD是否正常启动，如果正常说明安装成功
kubectl get pods --namespace=kube-system
解决证书过期的问题参考: https://www.jianshu.com/p/c6d560d12d50
登录dashboard的方式
1.通过token登录
创建证书:
cd /etc/kubernetes/pki/
kubectl create secret generic dashboard-cert -n kube-system --from-file=dashboard.crt=./dashboard.crt --from-file=dashboard.key=./dashboard.key 创建secret 类型是generic
创建sa
kubectl create serviceaccount dashboard-admin -n kube-system
kubectl get sa -n kube-system 查询sa
结果: dashboard-admin-token-j6g69
kubectl describe secrets -n kube-system dashboard-admin-token-j6g69
复制token，并粘帖到认证栏里即可
2.通过自建证书登录
kubectl describe secrets def-ns-admin-token-8flrw 获取token也能登录系统
Mh4MHV-wCXbI--ueSnmP7y9fgeouD_2xEa3g
DEF_NS_ADMIN_TOKEN=$(kubectl get secret def-ns-admin-token-8flrw -o jsonpath={.data.token} | base64 -d)
kubectl config view --kubeconfig=/root/def-ns-admin.conf
测试
注释:认证时的账号必须为serviceaccount:被dashborad pod拿来由kubernetes进行认证