k8s3主1从-1.15.1-高可用搭建-ipvs模式-kubernetes高可用安装包和详细文档笔记整理

k8s-master-2-集群搭完后管理操作-文档 2-flannel 和 dashboard

1.等各个 node 都加入集群后，master 上的管理操作（需要等到所有 node 节点都 join 加入集群再操作）

查看 flannel 在各个节点的部署，自动的，因为 yaml 文件是 daemonset 类型：

[root@master ~]# kubectl get pod -o wide -n kube-system |grep flannel

kube-flannel-ds-amd64-7hrwk 1/1 Running 0 6m57s 192.168.171.128 master <none> <none>

kube-flannel-ds-amd64-hvrgx 1/1 Running 0 6m57s 192.168.171.129 node1 <none> <none>

kube-flannel-ds-amd64-lsq72 1/1 Running 0 6m57s 192.168.171.130 node2 <none> <none>

[root@master ~]# kubectl get nodes #只要集群加入成功且 flannel 网络都成功，就为 ready 状态

NAME STATUS ROLES AGE VERSION

controller-manager Healthy ok

etcd-0 Healthy {"health":"true"}

[root@master ~]# kubectl create deployment nginx --image=nginx #创建一个 nginx 容器

deployment.apps/nginx created

[root@master ~]# kubectl get pod -o wide

NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES

nginx-65f88748fd-gt5nh 1/1 Running 0 5m7s 10.244.1.3 node1 <none> <none>

[root@master ~]# kubectl get deploy -o wide

NAME READY UP-TO-DATE AVAILABLE AGE CONTAINERS IMAGES SELECTOR

nginx 1/1 1 1 5m12s nginx nginx app=nginx

[root@master ~]# docker load -i kubernetes-dashboard-amd64_v1.10.1.tar #导入 dashboard 镜像，其他节点也导入

[root@master ~]# docker images |grep dashboard

registry.cn-hangzhou.aliyuncs.com/google_containers/kubernetes-dashboard-amd64 v1.10.1 f9aed6605b81 11 months ago 122MB

k8s.gcr.io/kubernetes-dashboard-amd64 v1.10.0 0dab2435c100 15 months ago 122MB

[root@master ~]# cat kubernetes-dashboard.yaml #不用修改

# Copyright 2017 The Kubernetes Authors.

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

# See the License for the specific language governing permissions and

# limitations under the License.

# ------------------- Dashboard Secret ------------------- #

apiVersion: v1

kind: Secret

metadata:

labels:

k8s-app: kubernetes-dashboard

name: kubernetes-dashboard-certs

namespace: kube-system

labels:

k8s-app: kubernetes-dashboard

name: kubernetes-dashboard

namespace: kube-system

---

# ------------------- Dashboard Role & Role Binding ------------------- #

kind: Role

apiVersion: rbac.authorization.k8s.io/v1

metadata:

name: kubernetes-dashboard-minimal

# Allow Dashboard to create 'kubernetes-dashboard-settings' config map.

- apiGroups: [""]

resources: ["configmaps"]

verbs: ["create"]

# Allow Dashboard to get, update and delete Dashboard exclusive secrets.

# Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.

- apiGroups: [""]

resources: ["configmaps"]

resourceNames: ["kubernetes-dashboard-settings"]

verbs: ["get", "update"]

# Allow Dashboard to get metrics from heapster.

- apiGroups: [""]

resources: ["services"]

resourceNames: ["heapster"]

verbs: ["proxy"]

- apiGroups: [""]

resources: ["services/proxy"]

verbs: ["get"]

apiVersion: rbac.authorization.k8s.io/v1

namespace: kube-system

roleRef:

apiGroup: rbac.authorization.k8s.io

kind: Role

name: kubernetes-dashboard-minimal

subjects:

- kind: ServiceAccount

namespace: kube-system

---

# ------------------- Dashboard Deployment ------------------- #

name: kubernetes-dashboard

namespace: kube-system

spec:

replicas: 1

revisionHistoryLimit: 10