kubernetes dashboard 생성

1. dashboard apply

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.0/aio/deploy/recommended.yaml

2. proxy 및 접근

kubectl proxy

http://localhost:8001/api/v1/namespaces/kubernewtes-dashboard/services/https://kubernetes-dashboard:/proxy

접속링크

3. dashboard secret 설정

kubectl apply -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: default-token
  namespace: kubernetes-dashboard
  annotations:
    kubernetes.io/service-account.name: default
type: kubernetes.io/service-account-token
EOF

secret/default-token created

 

4. token 가져오기

 

kubectl describe secret default-token | grep -E '^token'

token:        ehfibwoierytobk659khk304tk0NfG3rko...

 

5. dashboard token에 붙여넣기

default token 붙여넣기

접속 화면

6. admin-user 생성

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard

7. role binding

kubectl create clusterrolebinding serviceaccounts-cluster-admin --clusterrole=cluster-admin --group=system:serviceaccounts

 

8. test - create deployment

apiVersion: apps/v1
kind: Deployment
metadata:
	name: nginx-deployment
spec:
	selector:
    	matchLabels:
        	app: nginx
    replicas: 2
	template:
    	metadata:
        	labels:
            	app: nginx
        spec:
        	containers:
			- name: nginx
			  image: nginx:1.14.2
			  ports:
			  - containerPort: 80

 

9. 배포 화면

 

참고 문서

https://kubernetes.io/ko/docs/tasks/access-application-cluster/access-cluster/ 

클러스터 접근

 

https://stackoverflow.com/questions/49173838/deployments-apps-is-forbidden-user-systemserviceaccountdefaultdefault-cann

 

https://judekim.tistory.com/119