\u7cfb\u7edf\uff1aubuntu 20.04 LTS<\/p>\n\n\n\n
kubernetes\uff1av1.24.0<\/p>\n\n\n\n
1\u3001\u4e0b\u8f7dyaml<\/p>\n\n\n\n
kubectl apply -f https:\/\/raw.githubusercontent.com\/kubernetes\/dashboard\/v2.6.0\/aio\/deploy\/recommended.yaml<\/p>\n\n\n\n
2\u3001\u914d\u7f6eRBAC<\/p>\n\n\n\n
kubernetes v1.24.0 \u66f4\u65b0\u4e4b\u540e\u8fdb\u884c\u521b\u5efa ServiceAccount \u4e0d\u4f1a\u81ea\u52a8\u751f\u6210 Secret \u9700\u8981\u5bf9\u5176\u624b\u52a8\u521b\u5efa<\/p>\n\n\n\n
# vim admin-user.yaml<\/p>\n\n\n\n
# \u521b\u5efa ServiceAccount<\/p>\n\n\n\n
apiVersion: v1<\/p>\n\n\n\n
kind: ServiceAccount<\/p>\n\n\n\n
metadata:<\/p>\n\n\n\n
name: admin-user<\/p>\n\n\n\n
namespace: kubernetes-dashboard<\/p>\n\n\n\n
—<\/p>\n\n\n\n
# \u521b\u5efa Secret \u8d44\u6e90\u5e76\u4e0e ServiceAccount \u5173\u8054<\/p>\n\n\n\n
apiVersion: v1<\/p>\n\n\n\n
kind: Secret<\/p>\n\n\n\n
type: kubernetes.io\/service-account-token<\/p>\n\n\n\n
metadata:<\/p>\n\n\n\n
name: admin-user<\/p>\n\n\n\n
namespace: kubernetes-dashboard<\/p>\n\n\n\n
annotations:<\/p>\n\n\n\n
kubernetes.io\/service-account.name: “admin-user”<\/p>\n\n\n\n
—<\/p>\n\n\n\n
# \u7ed1\u5b9a\u9ed8\u8ba4cluster-admin\u7ba1\u7406\u5458\u96c6\u7fa4\u89d2\u8272<\/p>\n\n\n\n
apiVersion: rbac.authorization.k8s.io\/v1<\/p>\n\n\n\n
kind: ClusterRoleBinding<\/p>\n\n\n\n
metadata:<\/p>\n\n\n\n
name: admin-user<\/p>\n\n\n\n
roleRef:<\/p>\n\n\n\n
apiGroup: rbac.authorization.k8s.io<\/p>\n\n\n\n
kind: ClusterRole<\/p>\n\n\n\n
name: cluster-admin<\/p>\n\n\n\n
subjects:<\/p>\n\n\n\n
– kind: ServiceAccount<\/p>\n\n\n\n
name: admin-user<\/p>\n\n\n\n
namespace: kubernetes-dashboard<\/p>\n\n\n\n
3\u3001\u90e8\u7f72admin-user<\/p>\n\n\n\n
# kubernetes apply -f admin-user.yaml<\/p>\n\n\n\n
4\u3001\u83b7\u53d6token\u503c<\/p>\n\n\n\n
# kubectl -n kubernetes-dashboard describe secret $(<\/em>kubectl -n kubernetes-dashboard get secret | grep admin-user | awk ‘{print $1}’)<\/em> | grep ‘token:’<\/p>\n","protected":false},"excerpt":{"rendered":" \u7cfb\u7edf\uff1aubuntu 20.04 LTS kubernetes\uff1av1.24.0 1\u3001\u4e0b\u8f7dyaml kubectl […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"class_list":["post-700","post","type-post","status-publish","format-standard","hentry","category-kubernetes"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":6}},"views":17311,"_links":{"self":[{"href":"https:\/\/www.luyouli.com\/index.php?rest_route=\/wp\/v2\/posts\/700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.luyouli.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.luyouli.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.luyouli.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.luyouli.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=700"}],"version-history":[{"count":1,"href":"https:\/\/www.luyouli.com\/index.php?rest_route=\/wp\/v2\/posts\/700\/revisions"}],"predecessor-version":[{"id":701,"href":"https:\/\/www.luyouli.com\/index.php?rest_route=\/wp\/v2\/posts\/700\/revisions\/701"}],"wp:attachment":[{"href":"https:\/\/www.luyouli.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.luyouli.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.luyouli.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}