# 安装
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.0/aio/deploy/recommended.yaml
# 创建管理用户
cat > admin.yaml << EOF
apiVersion: v1
kind: ServiceAccount
metadata:
name: admin-user
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: admin-user
annotations:
rbac.authorization.kubernetes.io/autoupdate: "true"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: admin-user
namespace: kube-system
EOF
kubectl apply -f admin.yaml
# 一下操作用于测试,可以不操作
# 修改dashboard的svc,将cluster变更为nodeport
kubectl edit svc -n kubernetes-dashboard kubernetes-dashboard
## 修改内容
type: NodePort
# 查看NodePort地址
kubectl get svc -n kubernetes-dashboard
# 访问
## 浏览器访问,端口号30865为上一步查询所得,端口号为随机端口号以上面命令查询结果为准
https://192.168.31.181:30865/
# 登录验证方式选择token
## 查看token命令
kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')