#(1)概念

dashborad是kube-apiserver的gui实现, 一般用dashborad查看一些很简单的日志;

#(2)部署dashborad

kubectl apply -f https://gitee.com/love-docker/k8s/raw/master/v1.11/dashboard/kubernetes-dashboard.yaml

#(3)创建用于dashborad与apiserver之间认证账号以及授权
1)创建一个sa, 名字叫做dashboard-admin

kubectl create serviceaccount dashboard-admin -n kube-system

2)创建clusterrolebinding, 把sa绑定到clusterrole的用户cluster-admin,这样sa账号就拥有了cluster-admin权限, 默认系统最高账号权限是cluster-admin

kubectl create clusterrolebinding dashboard-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin

3)获取sa的token

kubectl get secret -n kube-system | grep admin
kubectl describe secret dashboard-admin-token-lxvz5 -n kube-system

4)复制token

#(5)访问dashborad
1)使用火狐浏览器
https://192.168.19.130:31888
添加例外

使用令牌登录, 复制token到令牌下

2)登录成功