每天5分钟玩转Kubernetes | Dashboard配置登录权限

Posted 2022-06-20 COCOgsta

书籍来源：cloudman《每天5分钟玩转Kubernetes》

一边学习一边整理老师的课程内容及试验笔记，并与大家分享，侵权即删，谢谢支持！

附上汇总贴：每天5分钟玩转Kubernetes | 汇总_COCOgsta的博客-CSDN博客

---

Dashboard支持Kubeconfig和Token两种认证方式，为了简化配置，我们通过配置文件dashboard-svc-account.yml为Dashboard默认用户赋予admin权限，如下所示。

[root@k8s-master ~]# cat dashboard-svc-account.yml 
apiVersion: v1
kind: ServiceAccount
metadata:
  name: dashboard-admin
  namespace: kube-system
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: dashboard-admin
subjects:
  - kind: ServiceAccount
    name: dashboard-admin
    namespace: kube-system
roleRef:
  kind: ClusterRole
  name: cluster-admin
  apiGroup: rbac.authorization.k8s.io
[root@k8s-master ~]# 

执行kubectl apply使之生效，如图所示。

获取token，如5图所示。

# 获取的token
eyJhbGciOiJSUzI1NiIsImtpZCI6IkZSRk5hLXN6OXMxZFhxSU5MN1BxalBwaVkwVzMtQWpUcHhBOEc0X3hwSFEifQ.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.n4JDVf7_0s0BPluYLuCiby9qVzk9HSVKKfSeYBzfw2-kSVI1qpvk06aab6QPGmOxcNZ38jmUKPqVtz5zKedQ1QZ290r9IpJpF67tcoacrKCkcu1TM9kOkdgsjLDSGlgHgm5xpt27YEbPmh-nFjDrXf-3qaGwSWYMazTGjcp8BhK3RlrHxhlhONqz_sAw8MAd8DRMdJJiznu37nM9AqBBkhk9Mpr7ESj8aPQibZKcSxevaU0qKYMtlTLVqApW2KzHcBaFXkr7NLW-5ylL9NE9J_VpAhiV2B4Y7FXyH2uPO9nXF7TPbQpK8zKtZXXXrPtXxRiJGSXkOgmAtQzPWlgNxg

现在登录页面中输入上面获取的Token就可以进入Dashboard了，如图所示。