{"id":1228,"date":"2024-07-13T16:17:26","date_gmt":"2024-07-13T08:17:26","guid":{"rendered":"http:\/\/118.178.124.79\/wordpress\/?p=1228"},"modified":"2025-05-23T12:42:20","modified_gmt":"2025-05-23T04:42:20","slug":"k8s%e9%9b%86%e7%be%a4%e6%90%ad%e5%bb%ba","status":"publish","type":"post","link":"https:\/\/minglelu.cn\/index.php\/2024\/07\/13\/1228\/","title":{"rendered":"k8s\u96c6\u7fa4\u642d\u5efa"},"content":{"rendered":"\n

\u4e09\u53f0\u670d\u52a1\u5668\uff0c\u4e00\u4e3b\u4fe9\u4ece<\/p>\n\n\n\n

\u5b89\u88c5docker
yum install docker-ce docker-ce-cli containerd.io
\u539f\u6765\u662f\u9ed8\u8ba4\u5b89\u88c5\u6700\u65b0\u7248\uff0c\u8fd9\u91cc\u9700\u8981\u6307\u5b9a\u4e00\u4e0b\u7248\u672c\uff0c\u76ee\u7684\u662f\u4fdd\u969c\u540e\u7eed\u5b89\u88c5k8s\u4e0d\u51fa\u95ee\u9898\uff1a<\/p>\n\n\n\n

yum install -y docker-ce-20.10.7 docker-ce-cli-20.10.7 containerd.io-1.4.6<\/p>\n\n\n\n

\u5b89\u88c5kubelet
3.1 \u5b89\u88c5\u8981\u6c42
\u4e00\u53f0\u517c\u5bb9\u7684 Linux \u4e3b\u673a\u3002Kubernetes \u9879\u76ee\u4e3a\u57fa\u4e8e Debian \u548c Red Hat \u7684 Linux \u53d1\u884c\u7248\u4ee5\u53ca\u4e00\u4e9b\u4e0d\u63d0\u4f9b\u5305\u7ba1\u7406\u5668\u7684\u53d1\u884c\u7248\u63d0\u4f9b\u901a\u7528\u7684\u6307\u4ee4\u3002<\/p>\n\n\n\n

\u6bcf\u53f0\u673a\u5668 2 GB \u6216\u66f4\u591a\u7684 RAM \uff08\u5982\u679c\u5c11\u4e8e\u8fd9\u4e2a\u6570\u5b57\u5c06\u4f1a\u5f71\u54cd\u4f60\u5e94\u7528\u7684\u8fd0\u884c\u5185\u5b58)<\/p>\n\n\n\n

2 CPU \u6838\u6216\u66f4\u591a<\/p>\n\n\n\n

\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u673a\u5668\u7684\u7f51\u7edc\u5f7c\u6b64\u5747\u80fd\u76f8\u4e92\u8fde\u63a5(\u516c\u7f51\u548c\u5185\u7f51\u90fd\u53ef\u4ee5)<\/p>\n\n\n\n

\u8bbe\u7f6e\u9632\u706b\u5899\u653e\u884c\u89c4\u5219<\/p>\n\n\n\n

\u8282\u70b9\u4e4b\u4e2d\u4e0d\u53ef\u4ee5\u6709\u91cd\u590d\u7684\u4e3b\u673a\u540d\u3001MAC \u5730\u5740\u6216 product_uuid\u3002\u8bf7\u53c2\u89c1\u8fd9\u91cc\u4e86\u89e3\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n\n\n\n

\u8bbe\u7f6e\u4e0d\u540chostname
\u5f00\u542f\u673a\u5668\u4e0a\u7684\u67d0\u4e9b\u7aef\u53e3\u3002\u8bf7\u53c2\u89c1\u8fd9\u91cc \u4e86\u89e3\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n\n\n\n

\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u5185\u7f51\u4e92\u4fe1
\u7981\u7528\u4ea4\u6362\u5206\u533a\u3002\u4e3a\u4e86\u4fdd\u8bc1 kubelet \u6b63\u5e38\u5de5\u4f5c\uff0c\u4f60 \u5fc5\u987b \u7981\u7528\u4ea4\u6362\u5206\u533a\u3002<\/p>\n\n\n\n

\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u6c38\u4e45\u5173\u95ed<\/p>\n\n\n\n

\u4e3a\u6bcf\u53f0\u670d\u52a1\u5668\u5b8c\u6210\u524d\u7f6e\u8bbe\u7f6e<\/mark><\/p>\n\n\n\n

\u5404\u4e2a\u673a\u5668\u8bbe\u7f6e\u81ea\u5df1\u7684\u57df\u540d<\/h1>\n\n\n\n

hostnamectl set-hostname xxxx<\/p>\n\n\n\n

\u5c06 SELinux \u8bbe\u7f6e\u4e3a permissive \u6a21\u5f0f\uff08\u76f8\u5f53\u4e8e\u5c06\u5176\u7981\u7528\uff09<\/h1>\n\n\n\n

sudo setenforce 0
sudo sed -i ‘s\/^SELINUX=enforcing$\/SELINUX=permissive\/’ \/etc\/selinux\/config<\/p>\n\n\n\n

\u5173\u95edswap<\/h1>\n\n\n\n

swapoff -a
sed -ri ‘s\/.swap.<\/em>\/#&\/’ \/etc\/fstab<\/p>\n\n\n\n

\u5141\u8bb8 iptables \u68c0\u67e5\u6865\u63a5\u6d41\u91cf<\/h1>\n\n\n\n

cat <<EOF | sudo tee \/etc\/modules-load.d\/k8s.conf
br_netfilter
EOF<\/p>\n\n\n\n

cat <<EOF | sudo tee \/etc\/sysctl.d\/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
sudo sysctl –system<\/p>\n\n\n\n

3.3 \u4e3a\u6bcf\u53f0\u670d\u52a1\u5668\u5b89\u88c5kubelet\u3001kubeadm\u3001kubectl<\/h3>\n\n\n\n

kubelet – \u201c\u5382\u957f\u201d<\/p>\n\n\n\n

kubectl – \u7a0b\u5e8f\u5458\u6572\u547d\u4ee4\u884c\u7684\u547d\u4ee4\u7a97<\/p>\n\n\n\n

kubeadm – \u5f15\u5bfc\u521b\u5efa\u96c6\u7fa4\u7684<\/p>\n\n\n\n

1.\u5148\u914d\u7f6eK8S\u4e0b\u8f7d\u7684\u5730\u5740<\/h1>\n\n\n\n

cat < \/etc\/yum.repos.d\/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http:\/\/mirrors.aliyun.com\/kubernetes\/yum\/repos\/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http:\/\/mirrors.aliyun.com\/kubernetes\/yum\/doc\/yum-key.gpg
http:\/\/mirrors.aliyun.com\/kubernetes\/yum\/doc\/rpm-package-key.gpg
exclude=kubelet kubeadm kubectl
EOF<\/p>\n\n\n\n

2. \u5b89\u88c5<\/h1>\n\n\n\n

sudo yum install -y kubelet-1.20.9 kubeadm-1.20.9 kubectl-1.20.9 –disableexcludes=kubernetes<\/p>\n\n\n\n

3. \u542f\u52a8kubelet<\/h1>\n\n\n\n

sudo systemctl enable –now kubelet
<\/p>\n\n\n\n

systemctl status kubelet<\/code><\/strong>\u00a0\u67e5\u770b\u72b6\u6001\u4f1a\u53d1\u73b0\uff0ckubelet \u73b0\u5728\u6bcf\u9694\u51e0\u79d2\u5c31\u4f1a\u91cd\u542f\uff0c\u56e0\u4e3a\u5b83\u9677\u5165\u4e86\u4e00\u4e2a\u7b49\u5f85 kubeadm \u6307\u4ee4\u7684\u6b7b\u5faa\u73af\u3002\u8fd9\u662f\u6b63\u5e38\u73b0\u8c61\u4e0d\u7528\u7ba1\uff01<\/mark><\/p>\n\n\n\n

\u4f7f\u7528kubeadm\u5f15\u5bfc\u96c6\u7fa4<\/p>\n\n\n\n

4 master\u670d\u52a1\u5668<\/h3>\n\n\n\n

\u4e0b\u8f7d\u5404\u4e2a\u673a\u5668\u9700\u8981\u7684\u955c\u50cf\uff0c\u4ee5\u4e0b\u53ea\u9700\u8981\u5728master\u673a\u5668\u4e0a\u6267\u884c\uff1a<\/p>\n\n\n\n

# 1. \u5b9a\u4e49\u4e00\u4e2afor\u5faa\u73af\uff0c\u9700\u8981\u7684\u4e1c\u897f\u4e0b\u8f7d\nsudo tee .\/images.sh <<-'EOF'\n#!\/bin\/bash\nimages=(\nkube-apiserver:v1.20.9\nkube-proxy:v1.20.9\nkube-controller-manager:v1.20.9\nkube-scheduler:v1.20.9\ncoredns:1.7.0\netcd:3.4.13-0\npause:3.2\n)\nfor imageName in ${images[@]} ; do\ndocker pull registry.cn-hangzhou.aliyuncs.com\/lfy_k8s_images\/$imageName\ndone\nEOF\n# 2. \u8d4b\u4e88\u6743\u9650\uff0c\u8ba9\u5b83\u4e0b\u8f7d\u8fd9\u4e9b\u4e1c\u897f\nchmod +x .\/images.sh && .\/images.sh<\/code><\/pre>\n\n\n\n
4.2 node1\u3001node2\u670d\u52a1\u5668<\/h3>\n\n\n\n
\u4ece\u8282\u70b9\u4e5f\u9700\u8981\u5b89\u88c5kube-proxy\u3002\u6211\u4eec\u53ef\u4ee5\u53ea\u4e0b\u8f7d\u8fd9\u4e2a\u955c\u50cf\uff0c\u5f53\u7136\u4e86\u4e3a\u4e86\u907f\u514d\u51fa\u73b0\u610f\u5916\uff0c\u6211\u4eec\u4e5f\u53ef\u4ee5\u90fd\u4e0b\u8f7d\u4e0b\u6765\u3002<\/p>\n\n\n\n
\n
1.\u9996\u5148\u7ed9\u6240\u6709\u7684\u670d\u52a1\u5668\u90fd\u6dfb\u52a0\u4e00\u4e0bk8s  master\u8fd9\u53f0\u670d\u52a1\u5668\u7684\u57df\u540d\u6620\u5c04<\/p>\n<\/blockquote>\n\n\n\n
\u6240\u6709\u673a\u5668\u6dfb\u52a0master\u57df\u540d\u6620\u5c04\uff0c\u4ee5\u4e0b\u9700\u8981\u4fee\u6539\u4e3a\u81ea\u5df1\u7684\u5185\u7f51ip\u5730\u5740<\/h1>\n\n\n\n
echo “192.168.xx.xx cluster-endpoint” >> \/etc\/hosts<\/p>\n\n\n\n
\u53ea\u5728k8s110\u8fd9\u53f0\u670d\u52a1\u5668\u4e0a\u6267\u884c\u4e3b\u8282\u70b9\u521d\u59cb\u5316\u8fc7\u7a0b\uff1a<\/p>\n\n\n\n
kubeadm init \\\n  --apiserver-advertise-address=192.168.10.22 \\\n  --image-repository registry.cn-hangzhou.aliyuncs.com\/lfy_k8s_images \\\n  --kubernetes-version v1.20.9 \\\n  --pod-network-cidr=192.168.50.0\/24\n\n\u521d\u59cb\u5316master\u8282\u70b9<\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u51fa\u73b0\u8fd9\u4e2a\u9519\u8bef\uff0c\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4<\/p>\n\n\n\n
sysctl -w net.ipv4.ip_forward=1<\/p>\n\n\n\n
\u7136\u540e\u91cd\u65b0\u6267\u884c\u521d\u59cb\u5316<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u521d\u59cb\u5316\u6210\u529f\uff0c\u8fd9\u6bb5\u91cd\u8981\uff0c\u9700\u8981\u590d\u5236\u4e0b\u6765\uff0c\u540e\u9762\u4f1a\u7528\u5230\u3002<\/p>\n\n\n\n
\u6309\u7167\u521d\u59cb\u5316\u6210\u529f\u540e\u7684\u6b65\u9aa4\u4e00\u6b65\u6b65\u6765<\/p>\n\n\n\n
mkdir -p $HOME\/.kube\nsudo cp -i \/etc\/kubernetes\/admin.conf $HOME\/.kube\/config\nsudo chown $(id -u):$(id -g) $HOME\/.kube\/config<\/code><\/pre>\n\n\n\n
\u67e5\u770b\u4e00\u4e0b\u96c6\u7fa4\u7684\u6240\u6709\u7ed3\u70b9\uff1a<\/p>\n\n\n\n
#\u67e5\u770b\u96c6\u7fa4\u6240\u6709\u8282\u70b9<\/em>\nkubectl get nodes<\/code><\/pre>\n\n\n\n
\u8fd9\u53f0\u670d\u52a1\u5668\u5c31\u662fmaster\u8282\u70b9\u4e86\uff0c\u4f46\u662f\u5b83\u7684\u72b6\u6001\u662fNotReady\u3002<\/p>\n\n\n\n
\u5b89\u88c5\u7f51\u7edc\u63d2\u4ef6\uff0c\u6709\u5f88\u591a\u79cd\uff0c\u8fd9\u8fb9\u9009\u62e9calico<\/p>\n\n\n\n
curl https:\/\/docs.projectcalico.org\/v3.20\/manifests\/calico.yaml -O<\/p>\n\n\n\n
\u4e0b\u8f7d\u6210\u529f\uff0cls\u67e5\u770b\u5f53\u524d\u76ee\u5f55\u6587\u4ef6\uff0ccalico.yaml\u914d\u7f6e\u6587\u4ef6\u5c31\u6709\u4e86<\/p>\n\n\n\n
\u8fdb\u5165calico\u914d\u7f6e\u6587\u4ef6\u4fee\u6539\u8fd9\u4e2a\u5730\u65b9\uff0c\u6539\u6210\u81ea\u5df1\u8bbe\u7f6e\u7684ip\u3002init\u521d\u59cb\u5316\u7684\u65f6\u5019<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
    \n
  1. \u6839\u636e\u914d\u7f6e\u6587\u4ef6\uff0c\u7ed9\u96c6\u7fa4\u521b\u5efa\u8d44\u6e90\uff08\u4ee5\u540e\u901a\u8fc7\u8be5\u547d\u4ee4\u4e3ak8s\u521b\u5efa\u8d44\u6e90\uff0c\u4e0d\u9650\u4e8ecalico<\/em><\/li>\n<\/ol>\n\n\n\n
    kubectl apply -f calico.yam<\/p>\n\n\n\n
    \u6267\u884c\u4ee5\u4e0a\u547d\u4ee4\u5b89\u88c5calico\u63d2\u4ef6<\/p>\n\n\n\n
    \u5982\u679c\u51fa\u73b0\u8fd9\u4e2a\u8bf4\u660e\uff0ccalico\u914d\u7f6e\u6587\u4ef6\u7f29\u8fdb\u6539\u9519\u4e86\u3002\u5bf9\u5176\u5373\u53ef<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u67e5\u770b\u96c6\u7fa4\u90e8\u7f72\u4e86\u54ea\u4e9b\u5e94\u7528<\/p>\n\n\n\n
      \n
    1. \u67e5\u770b\u96c6\u7fa4\u90e8\u7f72\u4e86\u54ea\u4e9b\u5e94\u7528<\/em><\/li>\n\n\n\n
    2. docker ps<\/li>\n\n\n\n
    3. # \u7b49\u4ef7\u4e8e<\/em><\/li>\n\n\n\n
    4. kubectl get pods -A<\/li>\n<\/ol>\n\n\n\n
      kubectl get nodes <\/p>\n\n\n\n
      \u73b0\u5728\u72b6\u6001\u5c31\u662fready\u72b6\u6001\u4e86<\/p>\n\n\n\n
      work\u8282\u70b9\u52a0\u5165\u96c6\u7fa4<\/p>\n\n\n\n
      \u59cb\u5316\u4e3b\u8282\u70b9\u6210\u529f\u540e\u7684\u63d0\u793a\u4e2d\u6709\u6b65\u9aa4\uff1a<\/p>\n\n\n\n
      \u5728\u5176\u4ed6\u4e24\u53f0\u670d\u52a1\u5668\u6267\u884c\uff0c\u521d\u59cb\u5316\u751f\u6210\u7684\u6570\u636e<\/p>\n\n\n\n
      kubeadm join cluster-endpoint:6443 –token 3e54se.alzs9d1mkf30f25w \\
      –discovery-token-ca-cert-hash sha256:689c076e294bdbb588103a51aaa7248b8a0df34bde634a6189d311ad46a02856<\/p>\n\n\n\n
      \u5982\u679c\u52a0\u5165\u62a5\u9519\uff0c\u8bf7\u67e5\u770b\u662f\u5426\u5df2\u7ecf\u5173\u95ed\u4e86\u9632\u706b\u5899\uff0c\u786e\u4fdd\u5173\u95ed\u9632\u706b\u5899\u7136\u540e\u6267\u884c\uff1a<\/p>\n\n\n\n
      \u7136\u540e\u53bbmaster\u67e5\u770b\u4e00\u4e0b\u8282\u70b9\u4fe1\u606f<\/p>\n\n\n\n
      kubectl get nodes<\/p>\n\n\n\n
      \u4e00\u822c\u6ca1\u6709\u90a3\u4e48\u5757\u5c31\u7eea\uff0c\u9700\u8981\u51e0\u79d2\u949f\u3002<\/p>\n\n\n\n
      \u67e5\u770b\u521d\u59cb\u5316\u5e94\u7528
      kubectl get pods -A<\/p>\n\n\n\n
      \u5168\u90e81\/1\u4ee3\u8868\u6210\u529f<\/p>\n\n\n\n
      \u4e5f\u53ef\u4ee5\u901a\u8fc7linux\u7684\u547d\u4ee4\u00a0watch -n 1\u00a0<\/strong>kubectl get pods -A\uff0c\u6bcf\u4e00\u79d2\u67e5\u770b\u4e00\u4e0b\u72b6\u6001<\/p>\n\n\n\n
      \u73b0\u5728\u518d\u7528kubectl get nodes \u67e5\u770b\u53d1\u73b0\u52a0\u5165\u6210\u529f\uff0c\u72b6\u6001\u662fready\u5c31\u53ef\u4ee5\u4e86<\/p>\n\n\n\n
      oken\u8fc7\u671f\u600e\u4e48\u529e\uff1f<\/h2>\n\n\n\n
      token\u8d85\u8fc724\u5c0f\u65f6\u5c31\u5931\u6548\u4e86\uff0c\u5982\u679c\u6211\u4eec\u8fd8\u6ca1\u6709\u52a0\u5165\u4ece\u8282\u70b9\uff0c\u6216\u8005\u60f3\u52a0\u5165\u65b0\u7684\u4ece\u8282\u70b9\uff0c\u53ef\u4ee5\u5728master\u8282\u70b9\u6267\u884c\u5982\u4e0b\u547d\u4ee4\uff0c\u8ba9\u5b83\u91cd\u65b0\u751f\u6210<\/p>\n\n\n\n
      kubeadm token create --print-join-command<\/code><\/pre>\n\n\n\n
      \u5b89\u88c5\u53ef\u89c6\u5316\u754c\u9762dashboard<\/h2>\n\n\n\n
      <\/a>6.1 \u5b89\u88c5<\/h3>\n\n\n\n
      kubectl apply -f https:\/\/raw.githubusercontent.com\/kubernetes\/dashboard\/v2.3.1\/aio\/deploy\/recommended.yaml<\/code><\/pre>\n\n\n\n
      \u5982\u679c\u7f51\u7edc\u4e0d\u597d\u5b89\u88c5\u4e0d\u4e86\u5c31\u590d\u5236\u4e0b\u9762\u7684\uff0c\u5c06\u5b83\u5199\u5165\u5230\u4e00\u4e2ayaml\u6587\u4ef6\u4e2d\uff0c\u7136\u540e\u6267\u884c\u8be5\u6587\u4ef6\u5373\u53ef\uff1a<\/p>\n\n\n\n
      # Copyright 2017 The Kubernetes Authors.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http:\/\/www.apache.org\/licenses\/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n \napiVersion: v1\nkind: Namespace\nmetadata:\n  name: kubernetes-dashboard\n \n---\n \napiVersion: v1\nkind: ServiceAccount\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard\n  namespace: kubernetes-dashboard\n \n---\n \nkind: Service\napiVersion: v1\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard\n  namespace: kubernetes-dashboard\nspec:\n  ports:\n    - port: 443\n      targetPort: 8443\n  selector:\n    k8s-app: kubernetes-dashboard\n \n---\n \napiVersion: v1\nkind: Secret\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard-certs\n  namespace: kubernetes-dashboard\ntype: Opaque\n \n---\n \napiVersion: v1\nkind: Secret\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard-csrf\n  namespace: kubernetes-dashboard\ntype: Opaque\ndata:\n  csrf: \"\"\n \n---\n \napiVersion: v1\nkind: Secret\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard-key-holder\n  namespace: kubernetes-dashboard\ntype: Opaque\n \n---\n \nkind: ConfigMap\napiVersion: v1\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard-settings\n  namespace: kubernetes-dashboard\n \n---\n \nkind: Role\napiVersion: rbac.authorization.k8s.io\/v1\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard\n  namespace: kubernetes-dashboard\nrules:\n  # Allow Dashboard to get, update and delete Dashboard exclusive secrets.\n  - apiGroups: [\"\"]\n    resources: [\"secrets\"]\n    resourceNames: [\"kubernetes-dashboard-key-holder\", \"kubernetes-dashboard-certs\", \"kubernetes-dashboard-csrf\"]\n    verbs: [\"get\", \"update\", \"delete\"]\n    # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.\n  - apiGroups: [\"\"]\n    resources: [\"configmaps\"]\n    resourceNames: [\"kubernetes-dashboard-settings\"]\n    verbs: [\"get\", \"update\"]\n    # Allow Dashboard to get metrics.\n  - apiGroups: [\"\"]\n    resources: [\"services\"]\n    resourceNames: [\"heapster\", \"dashboard-metrics-scraper\"]\n    verbs: [\"proxy\"]\n  - apiGroups: [\"\"]\n    resources: [\"services\/proxy\"]\n    resourceNames: [\"heapster\", \"http:heapster:\", \"https:heapster:\", \"dashboard-metrics-scraper\", \"http:dashboard-metrics-scraper\"]\n    verbs: [\"get\"]\n \n---\n \nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io\/v1\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard\nrules:\n  # Allow Metrics Scraper to get metrics from the Metrics server\n  - apiGroups: [\"metrics.k8s.io\"]\n    resources: [\"pods\", \"nodes\"]\n    verbs: [\"get\", \"list\", \"watch\"]\n \n---\n \napiVersion: rbac.authorization.k8s.io\/v1\nkind: RoleBinding\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard\n  namespace: kubernetes-dashboard\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: Role\n  name: kubernetes-dashboard\nsubjects:\n  - kind: ServiceAccount\n    name: kubernetes-dashboard\n    namespace: kubernetes-dashboard\n \n---\n \napiVersion: rbac.authorization.k8s.io\/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: kubernetes-dashboard\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: kubernetes-dashboard\nsubjects:\n  - kind: ServiceAccount\n    name: kubernetes-dashboard\n    namespace: kubernetes-dashboard\n \n---\n \nkind: Deployment\napiVersion: apps\/v1\nmetadata:\n  labels:\n    k8s-app: kubernetes-dashboard\n  name: kubernetes-dashboard\n  namespace: kubernetes-dashboard\nspec:\n  replicas: 1\n  revisionHistoryLimit: 10\n  selector:\n    matchLabels:\n      k8s-app: kubernetes-dashboard\n  template:\n    metadata:\n      labels:\n        k8s-app: kubernetes-dashboard\n    spec:\n      containers:\n        - name: kubernetes-dashboard\n          image: kubernetesui\/dashboard:v2.3.1\n          imagePullPolicy: Always\n          ports:\n            - containerPort: 8443\n              protocol: TCP\n          args:\n            - --auto-generate-certificates\n            - --namespace=kubernetes-dashboard\n            # Uncomment the following line to manually specify Kubernetes API server Host\n            # If not specified, Dashboard will attempt to auto discover the API server and connect\n            # to it. Uncomment only if the default does not work.\n            # - --apiserver-host=http:\/\/my-address:port\n          volumeMounts:\n            - name: kubernetes-dashboard-certs\n              mountPath: \/certs\n              # Create on-disk volume to store exec logs\n            - mountPath: \/tmp\n              name: tmp-volume\n          livenessProbe:\n            httpGet:\n              scheme: HTTPS\n              path: \/\n              port: 8443\n            initialDelaySeconds: 30\n            timeoutSeconds: 30\n          securityContext:\n            allowPrivilegeEscalation: false\n            readOnlyRootFilesystem: true\n            runAsUser: 1001\n            runAsGroup: 2001\n      volumes:\n        - name: kubernetes-dashboard-certs\n          secret:\n            secretName: kubernetes-dashboard-certs\n        - name: tmp-volume\n          emptyDir: {}\n      serviceAccountName: kubernetes-dashboard\n      nodeSelector:\n        \"kubernetes.io\/os\": linux\n      # Comment the following tolerations if Dashboard must not be deployed on master\n      tolerations:\n        - key: node-role.kubernetes.io\/master\n          effect: NoSchedule\n \n---\n \nkind: Service\napiVersion: v1\nmetadata:\n  labels:\n    k8s-app: dashboard-metrics-scraper\n  name: dashboard-metrics-scraper\n  namespace: kubernetes-dashboard\nspec:\n  ports:\n    - port: 8000\n      targetPort: 8000\n  selector:\n    k8s-app: dashboard-metrics-scraper\n \n---\n \nkind: Deployment\napiVersion: apps\/v1\nmetadata:\n  labels:\n    k8s-app: dashboard-metrics-scraper\n  name: dashboard-metrics-scraper\n  namespace: kubernetes-dashboard\nspec:\n  replicas: 1\n  revisionHistoryLimit: 10\n  selector:\n    matchLabels:\n      k8s-app: dashboard-metrics-scraper\n  template:\n    metadata:\n      labels:\n        k8s-app: dashboard-metrics-scraper\n      annotations:\n        seccomp.security.alpha.kubernetes.io\/pod: 'runtime\/default'\n    spec:\n      containers:\n        - name: dashboard-metrics-scraper\n          image: kubernetesui\/metrics-scraper:v1.0.6\n          ports:\n            - containerPort: 8000\n              protocol: TCP\n          livenessProbe:\n            httpGet:\n              scheme: HTTP\n              path: \/\n              port: 8000\n            initialDelaySeconds: 30\n            timeoutSeconds: 30\n          volumeMounts:\n          - mountPath: \/tmp\n            name: tmp-volume\n          securityContext:\n            allowPrivilegeEscalation: false\n            readOnlyRootFilesystem: true\n            runAsUser: 1001\n            runAsGroup: 2001\n      serviceAccountName: kubernetes-dashboard\n      nodeSelector:\n        \"kubernetes.io\/os\": linux\n      # Comment the following tolerations if Dashboard must not be deployed on master\n      tolerations:\n        - key: node-role.kubernetes.io\/master\n          effect: NoSchedule\n      volumes:\n        - name: tmp-volume\n          emptyDir: {}<\/code><\/pre>\n\n\n\n
      6 \u66b4\u9732\u7aef\u53e3<\/h3>\n\n\n\n
      kubectl edit svc kubernetes-dashboard -n kubernetes-dashboard<\/code><\/pre>\n\n\n\n
      type: ClusterIP \u6539\u4e3a type: NodePort<\/p>\n\n\n\n
      \u76f8\u5f53\u4e8edocker\u4e2d\u5c06\u5185\u90e8\u7684\u7aef\u53e3\u6620\u5c04\u5230linux\u7684\u67d0\u4e2a\u7aef\u53e3<\/p>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      \u627e\u5230\u653e\u884c\u7684\u7aef\u53e3<\/p>\n\n\n\n
      kubectl get svc -A |grep kubernetes-dashboard<\/code><\/pre>\n\n\n\n
      \u8bbf\u95eeweb\u754c\u9762<\/h3>\n\n\n\n
      \u8bbf\u95ee\uff1a https:\/\/\u96c6\u7fa4\u4efb\u610fIP:\u7aef\u53e3\u00a0https:\/\/192.168.1.11:31820\/<\/a><\/p>\n\n\n\n
      \u5982\u679c\u6d4f\u89c8\u5668\u4e0d\u80fd\u8bbf\u95ee<\/p>\n\n\n\n
      \u53ef\u4ee5\u6362\u6210\u641c\u72d7\uff0c\u706b\u72d0\u6d4f\u89c8\u5668\u53ef\u4ee5\u8bbf\u95ee\u5230\uff1a<\/p>\n\n\n\n
      \u521b\u5efa\u8bbf\u95ee\u8d26\u53f7<\/h3>\n\n\n\n
      \u521b\u5efa\u4e00\u4e2a\u914d\u7f6e\u6587\u4ef6dash-usr.yaml<\/p>\n\n\n\n
      #\u521b\u5efa\u8bbf\u95ee\u8d26\u53f7\uff0c\u51c6\u5907\u4e00\u4e2ayaml\u6587\u4ef6\uff1b vi dash.yaml\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n  name: admin-user\n  namespace: kubernetes-dashboard\n---\napiVersion: rbac.authorization.k8s.io\/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: admin-user\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: cluster-admin\nsubjects:\n- kind: ServiceAccount\n  name: admin-user\n  namespace: kubernetes-dashboard<\/code><\/pre>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
       \u751f\u6210\u4ee4\u724c<\/h3>\n\n\n\n
      \u8fd9\u4e2a\u53ef\u89c6\u5316\u754c\u9762\u662f\u901a\u8fc7\u4ee4\u724c\u767b\u5f55\u7684\uff0c\u6211\u4eec\u53ef\u4ee5\u901a\u8fc7\u5982\u4e0b\u547d\u4ee4\u751f\u6210\u8bbf\u95ee\u4ee4\u724c\uff1a<\/p>\n\n\n\n
      #\u83b7\u53d6\u8bbf\u95ee\u4ee4\u724c\nkubectl -n kubernetes-dashboard get secret $(kubectl -n kubernetes-dashboard get sa\/admin-user -o jsonpath=\"{.secrets[0].name}\") -o go-template=\"{{.data.token | base64decode}}\"<\/code><\/pre>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      \u8fd9\u6bb5\u662f\u4ee4\u724c<\/p>\n\n\n\n
      \u73b0\u5728\u5c31\u53ef\u4ee5\u901a\u8fc7\u8fd9\u4e2a\u4ee4\u724c\u767b\u5f55\u5230web\u754c\u9762\u4e86<\/p>\n\n\n\n
      \u91cd\u542f\u540e\uff0ck8s\u96c6\u7fa4\u6b63\u5e38\u6765\u8bf4\u5c31\u4f1a\u81ea\u52a8\u542f\u52a8\uff0c\u53ea\u4e0d\u8fc7\u90e8\u5206\u5e94\u7528\u9700\u8981\u65f6\u95f4\u6162\u6162\u542f\u52a8\uff0c\u7b49\u4ed6\u4eec\u5168\u90e8running<\/p>\n\n\n\n
      \u5982\u679c\u53d1\u73b0\u6ca1\u6709\u91cd\u542f\u6210\u529f\uff0c\u90a3\u4e48\u68c0\u67e5\u4e00\u4e0bswap\u4ea4\u6362\u5206\u533a\u662f\u4e0d\u662f\u6ca1\u6709\u5173\u95ed\uff1f\u9632\u706b\u5899\u662f\u4e0d\u662f\u6253\u5f00\u4e86\uff1fdocker\u662f\u4e0d\u662f\u90fd\u542f\u52a8\u4e86\uff1f<\/p>\n","protected":false},"excerpt":{"rendered":"
      \u4e09\u53f0\u670d\u52a1\u5668\uff0c\u4e00\u4e3b\u4fe9\u4ece \u5b89\u88c5dockeryum install docker-ce docker-ce-cli containerd.io\u539f\u6765\u662f\u9ed8\u8ba4\u5b89\u88c5\u6700\u65b0\u7248\uff0c\u8fd9\u91cc\u9700\u8981\u6307\u5b9a\u4e00\u4e0b\u7248\u672c\uff0c\u76ee\u7684\u662f\u4fdd\u969c\u540e\u7eed\u5b89\u88c5k8s\u4e0d\u51fa\u95ee\u9898\uff1a yum install -y docker-ce-20.10.7 docker-ce-cli-20.10.7 containerd.io-1.4.6 \u5b89\u88c5kubelet3.1 \u5b89\u88c5\u8981\u6c42 […]<\/p>\n","protected":false},"author":1,"featured_media":1243,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[],"class_list":["post-1228","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-computing"],"_links":{"self":[{"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/posts\/1228","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/comments?post=1228"}],"version-history":[{"count":10,"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/posts\/1228\/revisions"}],"predecessor-version":[{"id":1245,"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/posts\/1228\/revisions\/1245"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/media\/1243"}],"wp:attachment":[{"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/media?parent=1228"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/categories?post=1228"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/minglelu.cn\/index.php\/wp-json\/wp\/v2\/tags?post=1228"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}