本文只讨论官方推荐的方式安装访问 kubernetes dashboard
1.创建一个文件夹用来存放证书
[root@m1 ~]# mkdir certs
2.生成一个空白的证书dashboard.csr 和一个非对称密钥对 dashboard.key
[root@m1 ~]# openssl req -nodes -newkey rsa:2048 -keyout certs/dashboard.key -out certs/dashboard.csr -subj "/C=/ST=/L=/O=/OU=/CN=kubernetes-dashboard" Generating a 2048 bit RSA private key .......................+++ ........+++ writing new private key to 'certs/dashboard.key' ----- No value provided for Subject Attribute C, skipped No value provided for Subject Attribute ST, skipped No value provided for Subject Attribute L, skipped No value provided for Subject Attribute O, skipped No value provided for Subject Attribute OU, skipped
3.使用这个密钥对文件签名空白证书 生成签名证书dashboard.crt
[root@m1 ~]# openssl x509 -req -sha256 -days 10000 -in certs/dashboard.csr -signkey certs/dashboard.key -out certs/dashboard.crt Signature ok subject=/CN=kubernetes-dashboard Getting Private key
4.下载 dashboard配置文件 这个步骤需要翻墙, 为方便没有梯子的人我把 配置贴下面
[root@m1 ~]# wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta5/aio/deploy/recommended.yaml --2019-11-07 15:17:27-- https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta5/aio/deploy/recommended.yaml 正在连接 192.168.1.104:1080... 已连接。 已发出 Proxy 请求,正在等待回应... 200 OK 长度:7568 (7.4K) [text/plain] 正在保存至: “recommended.yaml” 100%[============================================================================================================================================>] 7,568 --.-K/s 用时 0s 2019-11-07 15:17:27 (25.3 MB/s) - 已保存 “recommended.yaml” [7568/7568])
recommended.yaml