synchronization

2025-08-25 17:53:08 +08:00
commit c201eb5ef9
318 changed files with 23092 additions and 0 deletions
--- a/资源部署/部署Kubernetes仪表板.md
+++ b/资源部署/部署Kubernetes仪表板.md
@@ -0,0 +1,105 @@
+> 本文作者：丁辉
+
+# 部署Kubernetes仪表板
+
+[官方文档](https://kubernetes.io/zh-cn/docs/tasks/access-application-cluster/web-ui-dashboard/)
+
+[Github文档](https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md)
+
+1. 部署 Dashboard UI
+
+   ```bash
+   kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
+   ```
+
+2. 编辑对外 svc 文件
+
+   ```bash
+   vi kubernetes-dashboard-svc.yaml
+   ```
+
+   内容如下
+
+   ```yaml
+   apiVersion: v1
+   kind: Service
+   metadata:
+     name: kubernetes-dashboard-40000
+     labels:
+       k8s-app: kubernetes-dashboard
+     namespace: kubernetes-dashboard
+   spec:
+     ports:
+     - name: kubernetes-dashboard
+       nodePort: 40000
+       port: 443
+       protocol: TCP
+       targetPort: 8443
+     selector:
+       k8s-app: kubernetes-dashboard
+     type: NodePort
+   ```
+
+3. 部署
+
+   ```bash
+   kubectl apply -f kubernetes-dashboard-svc.yaml
+   ```
+
+4. 查看状态
+
+   ```bash
+   kubectl get all -n kubernetes-dashboard
+   ```
+
+5. 获取长期令牌
+
+   ```bash
+   vi kubernetes-dashboard-token.yaml
+   ```
+
+   内容如下
+
+   ```yaml
+   apiVersion: v1
+   kind: ServiceAccount
+   metadata:
+     name: admin-user
+     namespace: kubernetes-dashboard
+   ---
+   apiVersion: rbac.authorization.k8s.io/v1
+   kind: ClusterRoleBinding
+   metadata:
+     name: admin-user
+   roleRef:
+     apiGroup: rbac.authorization.k8s.io
+     kind: ClusterRole
+     name: cluster-admin
+   subjects:
+   - kind: ServiceAccount
+     name: admin-user
+     namespace: kubernetes-dashboard
+   ---
+   apiVersion: v1
+   kind: Secret
+   metadata:
+     name: admin-user
+     namespace: kubernetes-dashboard
+     annotations:
+       kubernetes.io/service-account.name: "admin-user"   
+   type: kubernetes.io/service-account-token  
+   ```
+
+6. 创建
+
+   ```bash
+   kubectl apply -f kubernetes-dashboard-token.yaml
+   ```
+
+7. 查看 token
+
+   ```bash
+   kubectl get secret admin-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d
+   ```
+
+