Kubernetes 集群搭建(新人白嫖青云服务器) 一个master节点+两个工作节点

你的名字 2024-02-05 21:27 2阅读 0赞

#### 文章目录 ####

*   *  1， 购买青云服务器（白嫖）
     *  2，创建 VPC
     *  3，连接测试
     *  4，安装 docker
     *   *  4.1，安装docker 20.10.7
         *  4.2，配置加速镜像
     *  5，安装 Kubernetes
     *   *  5.1，要求
         *  5.2，设置hostname
         *  5.3，关闭交换区
         *  5.4，安装 K8s 三大件
         *  5.5，创建 control-plane
         *  5.6，初始化master主节点
         *  5.7，安装网络组件
         *  5.8，Worker 加入集群
         *  5.9，集群自我修复测试
     *  6， 部署 Dashboard
     *   *  6.1， 运行 pod（创建资源）
         *  6.2， 设置访问端口
         *  6.3， 开放安全组
         *  6.4，访问页面
         *  6.5，创建访问账号
         *  6.6，令牌访问
         *  6.7，界面
     *  7，Kubernetes 常用命令

> 需要 3台 云服务器，每台机器装上 Docker、Kubelet、Kubectl、Kubeadm。

### 1， 购买青云服务器（白嫖） ###

[青云 - 官网][-]，自己注册个账号，个人认证后，会给你 优惠券  
别担心，不要钱，可以白嫖一段时间（服务器 可用 25元的优惠券）

![在这里插入图片描述][684003389bdc403c8034f0433c1e929e.png]  
![在这里插入图片描述][42b416d2fd224e47b8e07fea3f517d31.png]  
释放了服务器， 公网IP 这里，如果有 就删除。  
![在这里插入图片描述][15d491f2a432493ca9b31ea344b4b8eb.png]  
我的配额 这里，要确保 公网IP 有3个 以上。如果没有，在 工单 -> 创建工单，联系客服 要。

![在这里插入图片描述][10d2cc8b4634480c84388f845460fbd4.png]  
![在这里插入图片描述][9d8cb9e32acd488ea3582df14f453967.png]

### 2，创建 VPC ###

专属私有网络 VPC 帮助您在公有云上构建出一个专属隔离的网络环境。在 VPC 网络内，您可以自定义 IP 地址范围，创建子网，并在子网内创建云服务器、数据库、大数据等各种云资源。您也可以通过管理路由器自定义更多高级管理功能。  
![在这里插入图片描述][ad5a67e6e4a541d0865888628f2a1305.png]

![在这里插入图片描述][cb8005f8f22944eab225fbc9a4139270.png]  
创建完毕vpc后，开始购买云服务器。

购买3台 2核4G 的服务器

![在这里插入图片描述][8fe207f9d0f0482498fe086718fda83a.png]  
![在这里插入图片描述][9577c265d0514acd9f246fcc0ffe580b.png]

![在这里插入图片描述][d88ee33a679d478993086dfee48f1131.png]  
选择服务器数量为3。

点击 立即购买，刷新一下 即可看到下面的 公网IPv4，我这里不就 开放了哈。  
![在这里插入图片描述][fa9a21aa12e74885992c3baca327b67e.png]  
![在这里插入图片描述][eaab6e50064841179f56cb34d58ec86e.png]

### 3，连接测试 ###

互相 ping，都可以 通。（其他不在 这个 VPC 网段的服务器，是ping 不通的）  
这里我使用xshell连接工具连接三台青云云服务器：

![在这里插入图片描述][f8693a8d6b9444c1a04cdd677be89824.png]  
![在这里插入图片描述][e77235961fb14a408083fdf720f93bdd.png]

![在这里插入图片描述][d979cbe7c7124d0c84acfd7918b7afa1.png]

### 4，安装 docker ###

#### 4.1，安装docker 20.10.7 ####

注意 Docker 版本，要和 Kubernetes 版本 有对应关系

# 三台机器上执行
    # 安装/更新 yum-utils
    yum install -y yum-utils
    
    # 配置 yum源
    yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
    
    # 安装 docker 20.10.7 版本
    yum -y install docker-ce-20.10.7 docker-ce-cli-20.10.7 containerd.io
    
    # 查看 docker 版本
    docker -v
    
    # 启动 docker
    systemctl start docker
    
    # 查看 docker 是否成功, 有 Client 和 Server 即成功
    docker version

分别查看 3台服务器 docker 状态

![在这里插入图片描述][6fb2f5915e2b4b33828832fd8b36d06c.png]

![在这里插入图片描述][fa67cb985dba4a9faddb64e670b4fe8c.png]

#### 4.2，配置加速镜像 ####

https://82m9ar63.mirror.aliyuncs.com，这个镜像加速 是 雷神的（个人具体可以在 阿里云 配置）

# 三台机子都执行
    sudo mkdir -p /etc/docker
    sudo tee /etc/docker/daemon.json <<-'EOF'
    {
      "registry-mirrors": ["https://82m9ar63.mirror.aliyuncs.com"],
      "exec-opts": ["native.cgroupdriver=systemd"],
      "log-driver": "json-file",
      "log-opts": {
        "max-size": "100m"
      },
      "storage-driver": "overlay2"
    }
    EOF
    sudo systemctl daemon-reload
    sudo systemctl restart docker
    
    # 查看是否配置成功
    docker info

![在这里插入图片描述][fa339552f4c84c34bd3dfcff15a6f8ed.png]

### 5，安装 Kubernetes ###

#### 5.1，要求 ####

*  每台机器 2GB 或者 更多的 RAM（如果少于这个数字 将会影响应用的运行内存）
 *  CPU 2核 以上
 *  集群中 所有的服务器 的网络 彼此可以相互连接。  
    购买的 2核4G 的云服务器，并且 相互可以 ping通。

#### 5.2，设置hostname ####

*  每台服务器的 主机名不可重复。

# 查看主机名
    hostname
    
    # 设置主机名
    hostnamectl set-hostname k8s-master
    hostnamectl set-hostname k8s-node-1
    hostnamectl set-hostname k8s-node-2
    
    # 更新
    bash

![在这里插入图片描述][188c2c54268541c79820cc1da71a8f08.png]

#### 5.3，关闭交换区 ####

下面是一些 安全设置

每台机子都执行！！！

# 查看 交换分区
    free -m
    
    # 将 SELinux 设置为 permissive 模式（相当于将其禁用）  第一行是临时禁用，第二行是永久禁用
    setenforce 0
    sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
    
    # 关闭swap；第一行是临时禁用，第二行是永久禁用
    swapoff -a  
    sed -ri 's/.*swap.*/#&/' /etc/fstab
    
    # 允许 iptables 检查桥接流量 （K8s 官方要求）
    cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
    br_netfilter
    EOF
    cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
    net.bridge.bridge-nf-call-ip6tables = 1
    net.bridge.bridge-nf-call-iptables = 1
    EOF
    
    # 让配置生效
    sysctl --system

![在这里插入图片描述][cffff55aef234b97b7a7d0b25e428d94.png]  
![在这里插入图片描述][68f0b2725485486380e214ac2b243301.png]  
![在这里插入图片描述][2b29575158d54a73a3e3074f2cf93280.png]  
如果是本地虚拟机的话 ，虚拟机关闭交换区，三台机器上执行

# 禁用 selinux
    vim /etc/selinux/config
    SELINUX=disabled
    
    # 关闭swap
    swapoff -a  # 临时
    vim /etc/fstab  # 永久
    # 注释下面这行
    #/dev/mapper/centos-swap swap                    swap    defaults        0 0
    
    # 查看是否成功
    free -m

![在这里插入图片描述][9b06be97fc7b478ca9b7aab5629d1a78.png]

#### 5.4，安装 K8s 三大件 ####

安装 kubelet、kebeadm、kubectl；注意版本 （1.20.9）

三台机器上执行

# 配置 k8s 的 yum 源地址
    cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
    [kubernetes]
    name=Kubernetes
    baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
    enabled=1
    gpgcheck=0
    repo_gpgcheck=0
    gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
       http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
    EOF

三台机器上执行

# 安装 kubelet、kubeadm、kubectl
    yum install -y kubelet-1.20.9 kubeadm-1.20.9 kubectl-1.20.9 --disableexcludes=kubernetes
    
    # 启动kubelet
    systemctl enable --now kubelet
    
    # 查看 kubelet 状态：一会停止 一会运行。 这个状态是对的，kubelet 等待 kubeadm 发号指令。
    systemctl status kubelet

![在这里插入图片描述][72edd56cba38463a87f13cbfd2263bb5.png]  
![在这里插入图片描述][fc62d1d7b89a4fbd95911b48e7c1c5b0.png]  
![在这里插入图片描述][7bb4bd58815c425784b5793dd51692e0.png]

#### 5.5，创建 control-plane ####

*  下载镜像  
    三台机器上执行

# 配置镜像，生成 images.sh
    sudo tee ./images.sh <<-'EOF'
    #!/bin/bash
    images=(
    kube-apiserver:v1.20.9
    kube-proxy:v1.20.9
    kube-controller-manager:v1.20.9
    kube-scheduler:v1.20.9
    coredns:1.7.0
    etcd:3.4.13-0
    pause:3.2
    )
    for imageName in ${images[@]} ; do
    docker pull registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images/$imageName
    done
    EOF
    
    # 拉取镜像
    chmod +x ./images.sh && ./images.sh

![在这里插入图片描述][d23f293a2c06411491282767b785dd3f.png]  
![在这里插入图片描述][6220ed7231e749c28e1605bf661814b9.png]  
报这个错，没启动 docker

![在这里插入图片描述][9ede05edb1f34c1393450ec5ad184395.png]  
![在这里插入图片描述][7b34542c7dcd4509874e0990647ed0b0.png]  
网段小知识  
![在这里插入图片描述][7f0aa93dcd8049f59f952c07c60c9c65.png]  
可以看到 docker 的 ip 是 172.17.x.x，所以 vps 设置 网段时候，不选择 172.17.x.x 的。

#### 5.6，初始化master主节点 ####

注：初始化 主节点命令，只在 master 服务执行。其他 node 服务器 不用。

# 所有机器添加 master 域名映射，以下 IP 为 master 的 IP；
    # 访问 cluster-endpoint 即 访问 192.168.100.3
    echo "192.168.100.3  cluster-endpoint" >> /etc/hosts
    
    # 主节点初始化 （只在 master 服务器执行， 其他 node 不用）
    # --apiserver-advertise-address: master 的 IP
    # --control-plane-endpoint: master 的域名
    # --service-cidr 和 --pod-network-cidr 是网络范围，雷神 建议不要改。要改的话 2 个cidr 和 vps（172.31.x.x） 的，3 个网络互相不能重叠；还要修改 calico.yaml的 IP（下图有写）。
    kubeadm init \
    --apiserver-advertise-address=192.168.100.3 \
    --control-plane-endpoint=cluster-endpoint \
    --image-repository registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images \
    --kubernetes-version v1.20.9 \
    --service-cidr=10.96.0.0/16 \
    --pod-network-cidr=192.168.0.0/16

保证三台机子都能ping通  
![在这里插入图片描述][abefcbbe31ea428abde7ebdc66e4075c.png]

![在这里插入图片描述][4f5a36cf2bcb4bffad453dfb2ee018a1.png]  
复制上面 输出的语句，这些命令 需要用到

Your Kubernetes control-plane has initialized successfully!
    
    To start using your cluster, you need to run the following as a regular user:
    
      mkdir -p $HOME/.kube
      sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
      sudo chown $(id -u):$(id -g) $HOME/.kube/config
    
    Alternatively, if you are the root user, you can run:
    
      export KUBECONFIG=/etc/kubernetes/admin.conf
    
    You should now deploy a pod network to the cluster.
    Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
      https://kubernetes.io/docs/concepts/cluster-administration/addons/
    
    You can now join any number of control-plane nodes by copying certificate authorities
    and service account keys on each node and then running the following as root:
    
      kubeadm join cluster-endpoint:6443 --token euztag.6yjbhn94ehg6nhn7 \
        --discovery-token-ca-cert-hash sha256:a6e917b751e424c7a761c2276ae02db95d87ba5a3cc6b374182519ce89aba28b \
        --control-plane 
    
    Then you can join any number of worker nodes by running the following on each as root:
    
    kubeadm join cluster-endpoint:6443 --token euztag.6yjbhn94ehg6nhn7 \
        --discovery-token-ca-cert-hash sha256:a6e917b751e424c7a761c2276ae02db95d87ba5a3cc6b374182519ce89aba28b

![在这里插入图片描述][106d67ee68e4441f94692e978c048841.png]

#### 5.7，安装网络组件 ####

注：只在 master 服务执行。其他 node 服务器 不用。  
在 master 执行

# 下载 calico.yaml
    curl https://docs.projectcalico.org/manifests/calico.yaml -O
    
    # 加载配置
    kubectl apply -f calico.yaml

如果上面链接下载不到calico，试一下下面的链接：

curl https://docs.projectcalico.org/v3.20/manifests/calico.yaml -O

#### 5.8，Worker 加入集群 ####

Worker 节点加入到集群中。  
![在这里插入图片描述][f7b5d404a3824fb89199e8ca084260eb.png]

注：此处要复制自己的，不要复制 下面的命令。

# 加入到 集群中，只在 2 个 node 服务器运行。
    kubeadm join cluster-endpoint:6443 --token euztag.6yjbhn94ehg6nhn7 \
        --discovery-token-ca-cert-hash sha256:a6e917b751e424c7a761c2276ae02db95d87ba5a3cc6b374182519ce89aba28b

![在这里插入图片描述][5bb31b842c0d467da6cfd75cb2323b76.png]  
![在这里插入图片描述][30bc409cd3dd4a13ab9f303fa4941fb7.png]  
回到 master 中 查看  
![在这里插入图片描述][e5783cc46b174147bd754c98dccd8356.png]  
![在这里插入图片描述][8d0e3614f73142d4ac094cabbe1d0c26.png]  
监控一下 服务器的状态，可以发现 master 服务器 消耗比较大。  
![在这里插入图片描述][387cfc5f6d304aceb5959b7eac0c41f5.png]  
令牌过期  
如果令牌过期了，重新 获取令牌。（在 master 服务器中 执行）

# 重新获取令牌
    kubeadm token create --print-join-command

#### 5.9，集群自我修复测试 ####

集群自我修复能力测试 （需要 docker 启动的前提下，systemctl start docker）  
3台 服务器 分别重启

# 重启
    reboot

集群 还是好好的。 nodes 的 STATUS 都是 Ready，查看 pods STATUS 过一会 都是 Running。

![在这里插入图片描述][9d06c1da2213473cac5a0ef7bb1c1255.png]

![在这里插入图片描述][231a9fdd4adf424d9e9490a240bc0d15.png]

### 6， 部署 Dashboard ###

部署 dashboard（可视化页面），[kubernetes 官方提供的可视化界面][kubernetes]

#### 6.1， 运行 pod（创建资源） ####

在 master 执行

# 下载 yaml文件
    curl https://raw.githubusercontent.com/kubernetes/dashboard/v2.3.1/aio/deploy/recommended.yaml -O

修改recommended.yaml 修改两处nodeName。

vi recommended.yaml

![在这里插入图片描述][22d38d91a69a425a995ccea40ce5f14b.png]  
然后运行

kubectl apply -f recommended.yaml

附上我的yaml文件：

# Copyright 2017 The Kubernetes Authors.
    #
    # Licensed under the Apache License, Version 2.0 (the "License");
    # you may not use this file except in compliance with the License.
    # You may obtain a copy of the License at
    #
    #     http://www.apache.org/licenses/LICENSE-2.0
    #
    # Unless required by applicable law or agreed to in writing, software
    # distributed under the License is distributed on an "AS IS" BASIS,
    # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    # See the License for the specific language governing permissions and
    # limitations under the License.
    
    apiVersion: v1
    kind: Namespace
    metadata:
      name: kubernetes-dashboard
    
    ---
    
    apiVersion: v1
    kind: ServiceAccount
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard
      namespace: kubernetes-dashboard
    
    ---
    
    kind: Service
    apiVersion: v1
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard
      namespace: kubernetes-dashboard
    spec:
      ports:
        - port: 443
          targetPort: 8443
      selector:
        k8s-app: kubernetes-dashboard
    
    ---
    
    apiVersion: v1
    kind: Secret
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard-certs
      namespace: kubernetes-dashboard
    type: Opaque
    
    ---
    
    apiVersion: v1
    kind: Secret
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard-csrf
      namespace: kubernetes-dashboard
    type: Opaque
    data:
      csrf: ""
    
    ---
    
    apiVersion: v1
    kind: Secret
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard-key-holder
      namespace: kubernetes-dashboard
    type: Opaque
    
    ---
    
    kind: ConfigMap
    apiVersion: v1
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard-settings
      namespace: kubernetes-dashboard
    
    ---
    
    kind: Role
    apiVersion: rbac.authorization.k8s.io/v1
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard
      namespace: kubernetes-dashboard
    rules:
      # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
      - apiGroups: [""]
        resources: ["secrets"]
        resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
        verbs: ["get", "update", "delete"]
        # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
      - apiGroups: [""]
        resources: ["configmaps"]
        resourceNames: ["kubernetes-dashboard-settings"]
        verbs: ["get", "update"]
        # Allow Dashboard to get metrics.
      - apiGroups: [""]
        resources: ["services"]
        resourceNames: ["heapster", "dashboard-metrics-scraper"]
        verbs: ["proxy"]
      - apiGroups: [""]
        resources: ["services/proxy"]
        resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
        verbs: ["get"]
    
    ---
    
    kind: ClusterRole
    apiVersion: rbac.authorization.k8s.io/v1
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard
    rules:
      # Allow Metrics Scraper to get metrics from the Metrics server
      - apiGroups: ["metrics.k8s.io"]
        resources: ["pods", "nodes"]
        verbs: ["get", "list", "watch"]
    
    ---
    
    apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard
      namespace: kubernetes-dashboard
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: Role
      name: kubernetes-dashboard
    subjects:
      - kind: ServiceAccount
        name: kubernetes-dashboard
        namespace: kubernetes-dashboard
    
    ---
    
    apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    metadata:
      name: kubernetes-dashboard
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: ClusterRole
      name: kubernetes-dashboard
    subjects:
      - kind: ServiceAccount
        name: kubernetes-dashboard
        namespace: kubernetes-dashboard
    
    ---
    
    kind: Deployment
    apiVersion: apps/v1
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
      name: kubernetes-dashboard
      namespace: kubernetes-dashboard
    spec:
      replicas: 1
      revisionHistoryLimit: 10
      selector:
        matchLabels:
          k8s-app: kubernetes-dashboard
      template:
        metadata:
          labels:
            k8s-app: kubernetes-dashboard
        spec:
          nodeName: k8s-master
          containers:
            - name: kubernetes-dashboard
              image: kubernetesui/dashboard:v2.3.1
              imagePullPolicy: Always
              ports:
                - containerPort: 8443
                  protocol: TCP
              args:
                - --auto-generate-certificates
                - --namespace=kubernetes-dashboard
                # Uncomment the following line to manually specify Kubernetes API server Host
                # If not specified, Dashboard will attempt to auto discover the API server and connect
                # to it. Uncomment only if the default does not work.
                # - --apiserver-host=http://my-address:port
              volumeMounts:
                - name: kubernetes-dashboard-certs
                  mountPath: /certs
                  # Create on-disk volume to store exec logs
                - mountPath: /tmp
                  name: tmp-volume
              livenessProbe:
                httpGet:
                  scheme: HTTPS
                  path: /
                  port: 8443
                initialDelaySeconds: 30
                timeoutSeconds: 30
              securityContext:
                allowPrivilegeEscalation: false
                readOnlyRootFilesystem: true
                runAsUser: 1001
                runAsGroup: 2001
          volumes:
            - name: kubernetes-dashboard-certs
              secret:
                secretName: kubernetes-dashboard-certs
            - name: tmp-volume
              emptyDir: {
        }
          serviceAccountName: kubernetes-dashboard
          nodeSelector:
            "kubernetes.io/os": linux
          # Comment the following tolerations if Dashboard must not be deployed on master
          tolerations:
            - key: node-role.kubernetes.io/master
              effect: NoSchedule
    
    ---
    
    kind: Service
    apiVersion: v1
    metadata:
      labels:
        k8s-app: dashboard-metrics-scraper
      name: dashboard-metrics-scraper
      namespace: kubernetes-dashboard
    spec:
      ports:
        - port: 8000
          targetPort: 8000
      selector:
        k8s-app: dashboard-metrics-scraper
    
    ---
    
    kind: Deployment
    apiVersion: apps/v1
    metadata:
      labels:
        k8s-app: dashboard-metrics-scraper
      name: dashboard-metrics-scraper
      namespace: kubernetes-dashboard
    spec:
      replicas: 1
      revisionHistoryLimit: 10
      selector:
        matchLabels:
          k8s-app: dashboard-metrics-scraper
      template:
        metadata:
          labels:
            k8s-app: dashboard-metrics-scraper
          annotations:
            seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
        spec:
          nodeName: k8s-master
          containers:
            - name: dashboard-metrics-scraper
              image: kubernetesui/metrics-scraper:v1.0.6
              ports:
                - containerPort: 8000
                  protocol: TCP
              livenessProbe:
                httpGet:
                  scheme: HTTP
                  path: /
                  port: 8000
                initialDelaySeconds: 30
                timeoutSeconds: 30
              volumeMounts:
              - mountPath: /tmp
                name: tmp-volume
              securityContext:
                allowPrivilegeEscalation: false
                readOnlyRootFilesystem: true
                runAsUser: 1001
                runAsGroup: 2001
          serviceAccountName: kubernetes-dashboard
          nodeSelector:
            "kubernetes.io/os": linux
          # Comment the following tolerations if Dashboard must not be deployed on master
          tolerations:
            - key: node-role.kubernetes.io/master
              effect: NoSchedule
          volumes:
            - name: tmp-volume
              emptyDir: {
        }

等到 Running  
![在这里插入图片描述][2ae20d7e17b0452783086447d2c90ed2.png]

#### 6.2， 设置访问端口 ####

# 修改配置文件 找到 type，将 ClusterIP 改成 NodePort
    kubectl edit svc kubernetes-dashboard -n kubernetes-dashboard
    
    # 找到端口，在安全组放行
    kubectl get svc -A |grep kubernetes-dashboard

输入 /type，找到 type，将 ClusterIP 改成 NodePort

![在这里插入图片描述][a847a0132c5e48fa81c727790da897be.png]  
![在这里插入图片描述][f3a6f8b15b154f419c811855ef06742c.png]  
![在这里插入图片描述][cc53ac57966f4542a82d24bac56b173f.png]

#### 6.3， 开放安全组 ####

在 ID 右键 -> 解绑，找到 用的哪个资源。  
![在这里插入图片描述][770fc8bb2d574c5aa244d83fa8de1ce5.png]  
添加完后，在点击 应用修改。

#### 6.4，访问页面 ####

https://xxxxxxx:32229 （要注意是 https，port 是映射的端口，在配置文件查看）  
这里需要用火狐游览器进行访问，使用chrome游览器有问题。

![在这里插入图片描述][0916bcb772ed4b55bcdff8edaefd3499.png]

#### 6.5，创建访问账号 ####

#创建访问账号，准备一个yaml文件； vi dash.yaml
    apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: admin-user
      namespace: kubernetes-dashboard
    ---
    apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    metadata:
      name: admin-user
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: ClusterRole
      name: cluster-admin
    subjects:
    - kind: ServiceAccount
      name: admin-user
      namespace: kubernetes-dashboard

kubectl apply -f dash.yaml

#### 6.6，令牌访问 ####

#获取访问令牌
    kubectl -n kubernetes-dashboard get secret $(kubectl -n kubernetes-dashboard get sa/admin-user -o jsonpath="{.secrets[0].name}") -o go-template="{
        {.data.token | base64decode}}"

eyJhbGciOiJSUzI1NiIsImtpZCI6InpXSkU0TjhCUmVKQzBJaC03Nk9ES2NMZ1daRTRmQ1FMZU9rRUJ3VXRnM3MifQ.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.Hf5mhl35_R0iBfBW7fF198h_klEnN6pRKfk_roAzOtAN-Aq21E4804PUhe9Rr9e_uFzLfoFDXacjJrHCuhiML8lpHIfJLK_vSD2pZNaYc2NWZq2Mso-BMGpObxGA23hW0nLQ5gCxlnxIAcyE76aYTAB6U8PxpvtVdgUknBVrwXG8UC_D8kHm9PTwa9jgbZfSYAfhOHWmZxNYo7CF2sHH-AT_WmIE8xLmB7J11vDzaunv92xoUoI0ju7OBA2WRr61bOmSd8WJgLCDcyBblxz4Wa-3zghfKlp0Rgb8l56AAI7ML_snF59X6JqaCuAcCJjIu0FUTS5DuyIObEeXY-z-Rw

#### 6.7，界面 ####

![在这里插入图片描述][50e7ccdda6c7483fa6929dfd8a956c1c.png]

### 7，Kubernetes 常用命令 ###

<table> 
 <thead> 
  <tr> 
   <th>命令</th> 
   <th>内容</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>kubectl get nodex</td> 
   <td>查看 k8s 集群 所有节点</td> 
  </tr> 
  <tr> 
   <td>kubectl get ns</td> 
   <td>查看命名空间</td> 
  </tr> 
  <tr> 
   <td>kubectl get pods -A</td> 
   <td>查看 k8s 集群 部署了 哪些应用</td> 
  </tr> 
  <tr> 
   <td>kubectl get pods</td> 
   <td>查看 默认命名空间（default）部署的应用</td> 
  </tr> 
  <tr> 
   <td>kubectl get pod -A -owide</td> 
   <td>查看 完整的信息，有 部署的 节点、节点IP 等。</td> 
  </tr> 
  <tr> 
   <td>kubectl get pod -w</td> 
   <td>打印 整个状态变化过程</td> 
  </tr> 
  <tr> 
   <td>Namespace 命名空间（-n）</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>kubectl get pod -n kubernetes-dashboard</td> 
   <td>查看 某个命名空间（kubernetes-dashboard）部署的应用</td> 
  </tr> 
  <tr> 
   <td>kubectl create ns hello</td> 
   <td>创建命名空间 hello</td> 
  </tr> 
  <tr> 
   <td>kubectl delete ns hello</td> 
   <td>删除命名空间 hello</td> 
  </tr> 
  <tr> 
   <td>集群资源</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>kubectl apply -f xxxx.yaml</td> 
   <td>根据配置文件，给 k8s 集群创建资源</td> 
  </tr> 
  <tr> 
   <td>kubectl delete -f hello-yaml.yaml</td> 
   <td>删除 hello-yaml.yaml 配置文件创建的资源</td> 
  </tr> 
  <tr> 
   <td>Pod</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>kubectl run mynginx-k8s --image=nginx</td> 
   <td>创建名为 mynginx-k8s 的 Pod （默认命名空间）</td> 
  </tr> 
  <tr> 
   <td>kubectl exec -it Pod名字 – /bin/bash</td> 
   <td>进入到 Pod 里面（和 docker exec -it 一样的）</td> 
  </tr> 
  <tr> 
   <td>kubectl describe pod mynginx-k8s</td> 
   <td>查看 Pod mynginx-k8s 的描述</td> 
  </tr> 
  <tr> 
   <td>kubectl delete pod mynginx-k8s</td> 
   <td>删除 在默认命名空间的 mynginx-k8s</td> 
  </tr> 
  <tr> 
   <td>kubectl delete pod mynginx-k8s -n xxx</td> 
   <td>删除 在 xxx 命名空间的 mynginx-k8s</td> 
  </tr> 
  <tr> 
   <td>kubectl logs mynginx-k8s</td> 
   <td>查看 Pod mynginx-k8s 的运行日志（默认的命名空间）</td> 
  </tr> 
  <tr> 
   <td>kubectl logs -f -n xxx命名空间 xxxPodName</td> 
   <td>查看 Pod 运行日志（-n 就是 namespace 命名空间）</td> 
  </tr> 
  <tr> 
   <td>Deployment</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>kubectl create deployment mytomcat --image=tomcat:8.5.68</td> 
   <td>用 Deployment 部署 Pod，deploy 名为 mytomcat 使用镜像 tomcat:8.5.68</td> 
  </tr> 
  <tr> 
   <td>kubectl get deploy</td> 
   <td>查看 Deployment 创建的资源</td> 
  </tr> 
  <tr> 
   <td>kubectl delete deploy mytomcat</td> 
   <td>删除 Deployment 创建的资源，用 delete 是删不掉的</td> 
  </tr> 
  <tr> 
   <td>kubectl create deployment my-dep --image=nginx --replicas=3 --replicas=3，</td> 
   <td>部署 3个 Pod my-dep</td> 
  </tr> 
  <tr> 
   <td>kubectl scale deploy/my-dep --relicas=5</td> 
   <td>对 Deployment my-dep 扩容 成 5 个 Pod</td> 
  </tr> 
  <tr> 
   <td>kubectl scale deploy/my-dep --relicas=2</td> 
   <td>对 Deployment my-dep 缩容 成 2 个 Pod</td> 
  </tr> 
  <tr> 
   <td>kubectl get deploy/my-dep -oyaml</td> 
   <td>查看之前用的镜像（spec.container.image）</td> 
  </tr> 
  <tr> 
   <td>kubectl get deploy/my-dep -oyaml</td> 
   <td>grep image</td> 
  </tr> 
  <tr> 
   <td>kubectl set image deployment/my-dep nginx=nginx:1.16.1 --record kubectl rollout status deployment/my-dep</td> 
   <td>改变 my-dep 中 nginx 版本（nginx 最新版 -&gt; 1.16.1）滚动更新</td> 
  </tr> 
  <tr> 
   <td>kubectl rollout history deployment/my-dep</td> 
   <td>历史记录</td> 
  </tr> 
  <tr> 
   <td>kubectl rollout histroy deployment/my-dep --revision=2</td> 
   <td>查看 my-dep 某个历史详情</td> 
  </tr> 
  <tr> 
   <td>kubectl rollout undo deployment/my-dep</td> 
   <td>my-dep 回滚（回到上个版本）</td> 
  </tr> 
  <tr> 
   <td>kubectl rollout undo deployment/my-dep --to-revision=2</td> 
   <td>my-dep 回滚到指定版本</td> 
  </tr> 
 </tbody> 
</table>

[-]: https://www.qingcloud.com/
[684003389bdc403c8034f0433c1e929e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/c470d557654740848b6b664efbccbfc5.png
[42b416d2fd224e47b8e07fea3f517d31.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/1308c4ae5ec04d77942fcb254e21b33d.png
[15d491f2a432493ca9b31ea344b4b8eb.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/1a6349ffed274efa99cd12ecbf556ff8.png
[10d2cc8b4634480c84388f845460fbd4.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/0dcb2d497e824b99af1bd2aa888da0d9.png
[9d8cb9e32acd488ea3582df14f453967.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/94c6183b883f48ebba0460f5da5f4276.png
[ad5a67e6e4a541d0865888628f2a1305.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/9677c7315551490286b34283cc94476b.png
[cb8005f8f22944eab225fbc9a4139270.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/2bc48727c87f4f569efd8273009c0788.png
[8fe207f9d0f0482498fe086718fda83a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/b4c9c914bf834704a0263629ca5b6a68.png
[9577c265d0514acd9f246fcc0ffe580b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/b986172c998e46cabd389d2d96421c4a.png
[d88ee33a679d478993086dfee48f1131.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/c78f59ba758b45b2bbabc76880b470e7.png
[fa9a21aa12e74885992c3baca327b67e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/f8ee948b044142d3a525d34cd611d519.png
[eaab6e50064841179f56cb34d58ec86e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/aa3fc622a16e455e8a247aa0dcd49333.png
[f8693a8d6b9444c1a04cdd677be89824.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/2e5ee18e3e2149b090f526f139ba36b8.png
[e77235961fb14a408083fdf720f93bdd.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/959b9f6115684c8ab3f137bdd3c60e69.png
[d979cbe7c7124d0c84acfd7918b7afa1.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/7205d2efde4b421188fc90b188e04e81.png
[6fb2f5915e2b4b33828832fd8b36d06c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/86c42f03c43a4aa7a33309074095d4f7.png
[fa67cb985dba4a9faddb64e670b4fe8c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/fd1f4fde2abf4191a6b0bf6197db551d.png
[fa339552f4c84c34bd3dfcff15a6f8ed.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/99aea7a71291400c94d75490e633414a.png
[188c2c54268541c79820cc1da71a8f08.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/76a2306ca39442b8abf198d0f3e2d678.png
[cffff55aef234b97b7a7d0b25e428d94.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/b4dff243d8b24614bfb04cd6ea73f0cb.png
[68f0b2725485486380e214ac2b243301.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/8056ae1769d34f91b5862b74f8f65312.png
[2b29575158d54a73a3e3074f2cf93280.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/66722868ff08462d9561c65eb0cf68e0.png
[9b06be97fc7b478ca9b7aab5629d1a78.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/6cd2e9b47f8e4c569806873ec76e378d.png
[72edd56cba38463a87f13cbfd2263bb5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/fec117e29b8d408696313af08051b947.png
[fc62d1d7b89a4fbd95911b48e7c1c5b0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/1de049af86e34a2db79a9e3bf1cd3e91.png
[7bb4bd58815c425784b5793dd51692e0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/63c2afc265bd4ed786d3acf985a884f1.png
[d23f293a2c06411491282767b785dd3f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/fc6038b17c5a44a1958bcd4eb456c1d9.png
[6220ed7231e749c28e1605bf661814b9.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/2a867a44354f436684c42de85b22b1b1.png
[9ede05edb1f34c1393450ec5ad184395.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/60901348fcb24fac80faaea2128f477b.png
[7b34542c7dcd4509874e0990647ed0b0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/b14aeb5d7d1a4441a30b071189fddd82.png
[7f0aa93dcd8049f59f952c07c60c9c65.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/81bacafcc653411d9d46bed662002f28.png
[abefcbbe31ea428abde7ebdc66e4075c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/512a554f6fda4cc6a34cdd663367bfad.png
[4f5a36cf2bcb4bffad453dfb2ee018a1.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/53c362f3705b4bd2a3c7f93d1ad337ae.png
[106d67ee68e4441f94692e978c048841.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/386ecf2672b64a24b6c3c67969dc55fb.png
[f7b5d404a3824fb89199e8ca084260eb.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/c1a6d60f1d5c438284a24e1d27a230c7.png
[5bb31b842c0d467da6cfd75cb2323b76.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/aa8cfff3a68e4c17b10c48b2a52a2c0e.png
[30bc409cd3dd4a13ab9f303fa4941fb7.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/e0afd769aeac4c8ca5b0ab28eefd4b33.png
[e5783cc46b174147bd754c98dccd8356.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/698aebe52ab34c2aa124a0954ee58c92.png
[8d0e3614f73142d4ac094cabbe1d0c26.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/34d543c157be4e8baa3c70e3880fd64f.png
[387cfc5f6d304aceb5959b7eac0c41f5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/a5dc81b82996420998ca61a433719920.png
[9d06c1da2213473cac5a0ef7bb1c1255.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/39e87c70b7704db693a5bc86dae5e8a1.png
[231a9fdd4adf424d9e9490a240bc0d15.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/72e1b322e08e488f8ada3937df057616.png
[kubernetes]: https://github.com/kubernetes/dashboard
[22d38d91a69a425a995ccea40ce5f14b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/d653bb1af0074ca8932f3ae507cdcf0d.png
[2ae20d7e17b0452783086447d2c90ed2.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/fb701dc49ec645e486f1fb98b48f4a1d.png
[a847a0132c5e48fa81c727790da897be.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/eba0ec2c34de43d294f273a147d5a1f9.png
[f3a6f8b15b154f419c811855ef06742c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/6682d4ada38f47b6bbb15fe929be2ed5.png
[cc53ac57966f4542a82d24bac56b173f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/2c86ce46064a41db876e718c5532f2d0.png
[770fc8bb2d574c5aa244d83fa8de1ce5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/2523b716462746f0842f45ec72e79b88.png
[0916bcb772ed4b55bcdff8edaefd3499.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/56cb20dd7edf4e53985e98d41cea1e7a.png
[50e7ccdda6c7483fa6929dfd8a956c1c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/30/04f6a53f3b0b400582d2ce9833703e44.png