您的浏览器过于古老 & 陈旧。为了更好的访问体验, 请 升级你的浏览器
j0785 发布于2022年12月26日 10:57

原创 Windows平台下通过Token方式登录Kubernetes Dashboard

172 次浏览 读完需要≈ 40 分钟 Windows

内容目录

  • Token登录方式一:创建账号并配置绑定登录权限

    • 执行命令kubectl -n kubernetes-dashboard create token kubernetes-dashboard ,回车会生成一个token值

      D:\k8s-for-docker-desktop-1.25.0>kubectl -n kubernetes-dashboard create token kubernetes-dashboard
      eyJhbGciOiJSUzI1NiIsIm*********
    • 查看对应的服务状态kubectl -n kubernetes-dashboard get serviceaccounts kubernetes-dashboard

      D:\k8s-for-docker-desktop-1.25.0>kubectl -n kubernetes-dashboard get serviceaccounts kubernetes-dashboard
      NAME                   SECRETS   AGE
      kubernetes-dashboard   0         3d3h

      secrets=0是因为token创建了但是没有保存到secrets里面

    • 查看集群管理员的权限kubectl -n kubernetes-dashboard describe clusterrole cluster-admin

      D:\k8s-for-docker-desktop-1.25.0>kubectl -n kubernetes-dashboard describe clusterrole cluster-admin
      Name:         cluster-admin
      Labels:       kubernetes.io/bootstrapping=rbac-defaults
      Annotations:  rbac.authorization.kubernetes.io/autoupdate: true
      PolicyRule:
        Resources  Non-Resource URLs  Resource Names  Verbs
        ---------  -----------------  --------------  -----
        *.*        []                 []              [*]
                   [*]                []              [*]
    • 查看kubernetes-dashboard对应的权限 kubectl -n kubernetes-dashboard describe clusterrole kubernetes-dashboard

      D:\k8s-for-docker-desktop-1.25.0>kubectl -n kubernetes-dashboard describe clusterrole kubernetes-dashboard
      Name:         kubernetes-dashboard
      Labels:       k8s-app=kubernetes-dashboard
      Annotations:  <none>
      PolicyRule:
        Resources             Non-Resource URLs  Resource Names  Verbs
        ---------             -----------------  --------------  -----
        nodes.metrics.k8s.io  []                 []              [get list watch]
        pods.metrics.k8s.io   []                 []              [get list watch]
    • 账号绑定权限kubectl create clusterrolebinding kubernetes-dashboard-cluster-admin --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:kubernetes-dashboard #集群角色绑定(kubernetes-dashboard-cluster-admin名称任意)

      D:\k8s-for-docker-desktop-1.25.0>kubectl create clusterrolebinding kubernetes-dashboard-cluster-admin --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:kubernetes-dashboard
      clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard-cluster-admin created
    • 查看集群绑定的权限kubectl get clusterrolebindings -o wide

      D:\k8s-for-docker-desktop-1.25.0>kubectl get clusterrolebindings -o wide
      NAME                                                   ROLE                                                                               AGE     USERS                            GROUPS                                            SERVICEACCOUNTS
      cluster-admin                                          ClusterRole/cluster-admin                                                          3d2h                                     system:masters
      dashboard-admin-bind-cluster-role                      ClusterRole/cluster-admin                                                          2d23h                                                                                      kubernetes-dashboard/dashboard-admin
      dashboard-cluster-admin                                ClusterRole/cluster-admin                                                          3d                                                                                         kube-system/dashboard-admin
      kubeadm:get-nodes                                      ClusterRole/kubeadm:get-nodes                                                      3d2h                                     system:bootstrappers:kubeadm:default-node-token
      kubeadm:kubelet-bootstrap                              ClusterRole/system:node-bootstrapper                                               3d2h                                     system:bootstrappers:kubeadm:default-node-token
      kubeadm:node-autoapprove-bootstrap                     ClusterRole/system:certificates.k8s.io:certificatesigningrequests:nodeclient       3d2h                                     system:bootstrappers:kubeadm:default-node-token
      kubeadm:node-autoapprove-certificate-rotation          ClusterRole/system:certificates.k8s.io:certificatesigningrequests:selfnodeclient   3d2h                                     system:nodes
      kubeadm:node-proxier                                   ClusterRole/system:node-proxier                                                    3d2h                                                                                       kube-system/kube-proxy
      kubernetes-dashboard                                   ClusterRole/kubernetes-dashboard                                                   3d2h                                                                                       kubernetes-dashboard/kubernetes-dashboard
      kubernetes-dashboard-cluster-admin                     ClusterRole/cluster-admin                                                          38s                                                                                        kubernetes-dashboard/kubernetes-dashboard
      lucky2-admin-rolebinding                               ClusterRole/cluster-admin                                                          8m35s                                                                                      lucky2/lucky2-admin
      storage-provisioner                                    ClusterRole/storage-provisioner                                                    3d2h                                                                                       kube-system/storage-provisioner
      system:basic-user                                      ClusterRole/system:basic-user                                                      3d2h                                     system:authenticated
      system:controller:attachdetach-controller              ClusterRole/system:controller:attachdetach-controller                              3d2h                                                                                       kube-system/attachdetach-controller
      system:controller:certificate-controller               ClusterRole/system:controller:certificate-controller                               3d2h                                                                                       kube-system/certificate-controller
      system:controller:clusterrole-aggregation-controller   ClusterRole/system:controller:clusterrole-aggregation-controller                   3d2h                                                                                       kube-system/clusterrole-aggregation-controller
      system:controller:cronjob-controller                   ClusterRole/system:controller:cronjob-controller                                   3d2h                                                                                       kube-system/cronjob-controller
      system:controller:daemon-set-controller                ClusterRole/system:controller:daemon-set-controller                                3d2h                                                                                       kube-system/daemon-set-controller
      system:controller:deployment-controller                ClusterRole/system:controller:deployment-controller                                3d2h                                                                                       kube-system/deployment-controller
      system:controller:disruption-controller                ClusterRole/system:controller:disruption-controller                                3d2h                                                                                       kube-system/disruption-controller
      system:controller:endpoint-controller                  ClusterRole/system:controller:endpoint-controller                                  3d2h                                                                                       kube-system/endpoint-controller
      system:controller:endpointslice-controller             ClusterRole/system:controller:endpointslice-controller                             3d2h                                                                                       kube-system/endpointslice-controller
      system:controller:endpointslicemirroring-controller    ClusterRole/system:controller:endpointslicemirroring-controller                    3d2h                                                                                       kube-system/endpointslicemirroring-controller
      system:controller:ephemeral-volume-controller          ClusterRole/system:controller:ephemeral-volume-controller                          3d2h                                                                                       kube-system/ephemeral-volume-controller
      system:controller:expand-controller                    ClusterRole/system:controller:expand-controller                                    3d2h                                                                                       kube-system/expand-controller
      system:controller:generic-garbage-collector            ClusterRole/system:controller:generic-garbage-collector                            3d2h                                                                                       kube-system/generic-garbage-collector
      system:controller:horizontal-pod-autoscaler            ClusterRole/system:controller:horizontal-pod-autoscaler                            3d2h                                                                                       kube-system/horizontal-pod-autoscaler
      system:controller:job-controller                       ClusterRole/system:controller:job-controller                                       3d2h                                                                                       kube-system/job-controller
      system:controller:namespace-controller                 ClusterRole/system:controller:namespace-controller                                 3d2h                                                                                       kube-system/namespace-controller
      system:controller:node-controller                      ClusterRole/system:controller:node-controller                                      3d2h                                                                                       kube-system/node-controller
      system:controller:persistent-volume-binder             ClusterRole/system:controller:persistent-volume-binder                             3d2h                                                                                       kube-system/persistent-volume-binder
      system:controller:pod-garbage-collector                ClusterRole/system:controller:pod-garbage-collector                                3d2h                                                                                       kube-system/pod-garbage-collector
      system:controller:pv-protection-controller             ClusterRole/system:controller:pv-protection-controller                             3d2h                                                                                       kube-system/pv-protection-controller
      system:controller:pvc-protection-controller            ClusterRole/system:controller:pvc-protection-controller                            3d2h                                                                                       kube-system/pvc-protection-controller
      system:controller:replicaset-controller                ClusterRole/system:controller:replicaset-controller                                3d2h                                                                                       kube-system/replicaset-controller
      system:controller:replication-controller               ClusterRole/system:controller:replication-controller                               3d2h                                                                                       kube-system/replication-controller
      system:controller:resourcequota-controller             ClusterRole/system:controller:resourcequota-controller                             3d2h                                                                                       kube-system/resourcequota-controller
      system:controller:root-ca-cert-publisher               ClusterRole/system:controller:root-ca-cert-publisher                               3d2h                                                                                       kube-system/root-ca-cert-publisher
      system:controller:route-controller                     ClusterRole/system:controller:route-controller                                     3d2h                                                                                       kube-system/route-controller
      system:controller:service-account-controller           ClusterRole/system:controller:service-account-controller                           3d2h                                                                                       kube-system/service-account-controller
      system:controller:service-controller                   ClusterRole/system:controller:service-controller                                   3d2h                                                                                       kube-system/service-controller
      system:controller:statefulset-controller               ClusterRole/system:controller:statefulset-controller                               3d2h                                                                                       kube-system/statefulset-controller
      system:controller:ttl-after-finished-controller        ClusterRole/system:controller:ttl-after-finished-controller                        3d2h                                                                                       kube-system/ttl-after-finished-controller
      system:controller:ttl-controller                       ClusterRole/system:controller:ttl-controller                                       3d2h                                                                                       kube-system/ttl-controller
      system:coredns                                         ClusterRole/system:coredns                                                         3d2h                                                                                       kube-system/coredns
      system:discovery                                       ClusterRole/system:discovery                                                       3d2h                                     system:authenticated
      system:kube-controller-manager                         ClusterRole/system:kube-controller-manager                                         3d2h    system:kube-controller-manager
      system:kube-dns                                        ClusterRole/system:kube-dns                                                        3d2h                                                                                       kube-system/kube-dns
      system:kube-scheduler                                  ClusterRole/system:kube-scheduler                                                  3d2h    system:kube-scheduler
      system:monitoring                                      ClusterRole/system:monitoring                                                      3d2h                                     system:monitoring
      system:node                                            ClusterRole/system:node                                                            3d2h
      system:node-proxier                                    ClusterRole/system:node-proxier                                                    3d2h    system:kube-proxy
      system:public-info-viewer                              ClusterRole/system:public-info-viewer                                              3d2h                                     system:authenticated, system:unauthenticated
      system:service-account-issuer-discovery                ClusterRole/system:service-account-issuer-discovery                                3d2h                                     system:serviceaccounts
      system:volume-scheduler                                ClusterRole/system:volume-scheduler                                                3d2h    system:kube-scheduler
      vpnkit-controller                                      ClusterRole/vpnkit-controller                                                      3d2h                                                                                       kube-system/vpnkit-controller
    • 然后第一步生成的token复制到登录界面内的token输入框,然后选择【登录】

  • Token登录方式二:创建普通服务账号

    • 手动创建服务账号kubectl create serviceaccount jenkins

      使用 kubectl create serviceaccount <名称> 命令, 此命令会在当前的名字空间中生成一个服务账号

      C:\Users\Shinelon>kubectl create serviceaccount jenkins
      serviceaccount/jenkins created
    • 创建相关联的令牌kubectl create token jenkins

      C:\Users\Shinelon>kubectl create token jenkins
      eyJhbGciOiJSUzI1NiIsImtp...
    • 去到登录界面选择Token登录,将命令行生成的token复制到token输入框,然后选择【登录】

    1671354334136.jpg

  • CodePlayer技术交流群1
  • CodePlayer技术交流群2

0 条评论

撰写评论