通过token令牌登陆k8s dashboard ui界面

淩亂°似流年 2023-02-26 02:29 27阅读 0赞

## 微信公众号搜索DevOps和k8s全栈技术 ，即可关注我的公众号，也可通过扫描文章最后的二维码关注，每天都会分享技术文章供大家参考阅读~，拥抱开源，同大家共同进步~    ##

通过token令牌登陆dashboard界面

**1.****创建一个只能管理指定名称空间的token**

**以下步骤在k8s的master节点操作**

（1）在lucky命名空间创建一个lucky的serviceaccount账户

kubectl create namespace lucky

kubectl create serviceaccount lucky-admin -n lucky

（2）把lucky用户做rolebingding绑定

kubectl create rolebinding lucky-admin -n lucky --clusterrole=cluster-admin --serviceaccount=lucky:lucky-admin

（3）查看secret

kubectl get secret -n lucky

显示如下：

kubectl describe secret lucky-admin-token-qrrrc -n lucky

显示如下:

eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJsdWNreSIsImt1YmVybmV0ZXMuaW8vc2VydmljWUiOiJsdWNreS1hZG1pbi10b2tlbi0ycG0ybCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvcUiOiJsdWNreS1hZG1pbiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdWyNGYtMTFlOS1iOTM3LTAwMGMyOTc0ZWNkYiIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDpsdWN8fwHcAQa7RSTJaf7ygyDhTNTvmpca8Dn8KsK-fqRrVcpiQJw_y4ekKfmmNnchZzJr1WCYqoSPb22xUKEN2ZGGV6o9mvJEVgfnch6dYRxowKEzmK7Yhq5ZlUi9MYzmU-41mjicuH8HE2Jmd2FOfESItw8Sqd3aKlEMz9-H52VSLEcAQyrDMZg0oqPfoyS7C13iAVawVkhC4fqPlLvTFpYQW6I6Ia_l6RcXLlGQgZzorlUbHWsVt0BJw6P0OdbP7TpgA1p_ZdQ

上面的token输入到web界面的令牌认证处，登陆之后只能看到lucky的命名空间

**2.创建一个能管理所有名称空间的token**

**以下步骤在k8s的master节点操作**

**1****）查看kubernetes-dashboard名称空间下的secret**

kubectl get secret -n kubernetes-dashboard

**显示如下：**

NAME                               TYPE                                  DATA   AGE
    default-token-vxd7t                kubernetes.io/service-account-token   3      5m27s
    kubernetes-dashboard-certs         Opaque                                0      5m27s
    kubernetes-dashboard-csrf          Opaque                                1      5m27s
    kubernetes-dashboard-key-holder    Opaque                                2      5m27s
    kubernetes-dashboard-token-ngcmg   kubernetes.io/service-account-token   3      5m27s

**2****）找到对应的带有token的kubernetes-dashboard-token-ngcmg**

kubectl  describe  secret  kubernetes-dashboard-token-ngcmg  -n  kubernetes-dashboard

**显示如下：**

...
    token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IjZUTVVGMDN4enFTREpqV0s3cDRWa254cTRPc2xPRTZ3bk8wcFJBSy1JSzgifQ.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.WQFE0ygYdKkUjaQjFFU-BeWqys07J98N24R_azv6f-o9AB8Zy1bFWZcNrOlo6WYQuh-xoR8tc5ZDuLQlnZMBSwl2jo9E9FLZuEt7klTfXf4TkrQGLCxzDMD5c2nXbdDdLDtRbSwQMcQwePwp5WTAfuLyqJPFs22Xi2awpLRzbHn3ei_czNuamWUuoGHe6kP_rTnu6OUpVf1txi9C1Tg_3fM2ibNy-NWXLvrxilG3x3SbW1A3G6Y2Vbt1NxqVNtHRRQsYCvTnp3NZQqotV0-TxnvRJ3SLo_X6oxdUVnqt3DZgebyIbmg3wvgAzGmuSLlqMJ-mKQ7cNYMFR2Z8vnhhtA

**记住token后面的值，把下面的token值复制到浏览器token登陆处即可登陆：**

eyJhbGciOiJSUzI1NiIsImtpZCI6IjZUTVVGMDN4enFTREpqV0s3cDRWa254cTRPc2xPRTZ3bk8wcFJBSy1JSzgifQ.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.WQFE0ygYdKkUjaQjFFU-BeWqys07J98N24R_azv6f-o9AB8Zy1bFWZcNrOlo6WYQuh-xoR8tc5ZDuLQlnZMBSwl2jo9E9FLZuEt7klTfXf4TkrQGLCxzDMD5c2nXbdDdLDtRbSwQMcQwePwp5WTAfuLyqJPFs22Xi2awpLRzbHn3ei_czNuamWUuoGHe6kP_rTnu6OUpVf1txi9C1Tg_3fM2ibNy-NWXLvrxilG3x3SbW1A3G6Y2Vbt1NxqVNtHRRQsYCvTnp3NZQqotV0-TxnvRJ3SLo_X6oxdUVnqt3DZgebyIbmg3wvgAzGmuSLlqMJ-mKQ7cNYMFR2Z8vnhhtA

![format_png][]

点击sing in登陆，显示如下，默认是只能看到default名称空间内容

![format_png 1][]

**3.创建管理员token，可查看任何空间权限**

kubectl create clusterrolebinding dashboard-cluster-admin  --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:kubernetes-dashboard

**1****）查看kubernetes-dashboard名称空间下的secret**

kubectl get secret -n kubernetes-dashboard

**显示如下：**

**2****）找到对应的带有token的kubernetes-dashboard-token-ngcmg**

kubectl  describe  secret kubernetes-dashboard-token-ngcmg  -n   kubernetes-dashboard

**显示如下：**

**记住token后面的值，把下面的token值复制到浏览器token登陆处即可登陆：**

![format_png 2][]

点击sing in登陆，显示如下，这次就可以看到和操作任何名称空间的资源了

![format_png 3][]

往期精彩文章回顾

[kubernetes全栈技术+企业案例演示【带你快速掌握和使用k8s】][kubernetes_k8s]

[kubernetes面试题汇总][kubernetes]

[DevOps视频和资料免费领取][DevOps]

[kubernetes技术分享-可用于企业内部培训][kubernetes_-]

[谈谈我的IT发展之路][IT]

[kubernetes系列文章第一篇-k8s基本介绍][kubernetes_-k8s]

[kubernetes系列文章第二篇-kubectl][kubernetes_-kubectl]

[了解pod和pod的生命周期-这一篇文章就够了][pod_pod_-]

[Kubernetes中部署MySQL高可用集群][Kubernetes_MySQL]

[Prometheus+Grafana+Alertmanager搭建全方位的监控告警系统-超详细文档][Prometheus_Grafana_Alertmanager_-]

[k8s1.18多master节点高可用集群安装-超详细中文官方文档][k8s1.18_master_-]

[k8s中蓝绿部署、金丝雀发布、滚动更新汇总][k8s]

[运维常见问题汇总-tomcat篇][-tomcat]

[关于linux内核参数的调优，你需要知道][linux]

[kubernetes持久化存储volume][kubernetes_volume]

[kubernetes挂载ceph rbd和cephfs][kubernetes_ceph rbd_cephfs]

[报警神器Alertmanager发送报警到多个渠道][Alertmanager]

[jenkins+kubernetes+harbor+gitlab构建企业级devops平台][jenkins_kubernetes_harbor_gitlab_devops]

[kubernetes网络插件-flannel篇][kubernetes_-flannel]

[kubernetes网络插件-calico篇][kubernetes_-calico]

[kubernetes认证、授权、准入控制][kubernetes 1]

[限制不同的用户操作k8s资源][k8s 1]

[面试真题&技术资料免费领取-覆盖面超全~][-]

[Prometheus监控MySQL][Prometheus_MySQL]

[Prometheus监控Nginx][Prometheus_Nginx]

[Prometheus监控Tomcat][Prometheus_Tomcat]

[linux面试题汇总][linux 1]

[测试通过storageclass动态生成pv][storageclass_pv]

[通过编写k8s的资源清单yaml文件部署gitlab服务][k8s_yaml_gitlab]

[helm安装和使用-通过helm部署k8s应用][helm_-_helm_k8s]

[Prometheus Operator-上篇-安装和使用篇][Prometheus Operator-_-]

[Prometheus Operator-下篇][Prometheus Operator-]

[通过kubeconfig登陆k8s的dashboard ui界面][kubeconfig_k8s_dashboard ui]

## 技术交流群    ##

了解更多关于kubernetes/docker/devops/openstack/openshift/linux/IaaS/PaaS/python/云计算相关内容，想要获取更多资料和免费视频，可按如下方式进入技术交流群

**扫码加群????**

![format_png 4][]

**微信：**luckylucky421302

## 微信公众号    ##

**                               ** **长按指纹关注公众号????**

![format_png 5][]

**                               点击在看少个 bug????**

[format_png]: /images/20230209/857ec32fd5a248e3868a6c015d3a65d7.png
[format_png 1]: /images/20230209/ea3b13db61664a2cb01186d59bf54b0a.png
[format_png 2]: /images/20230209/d84fd651c25d4bddb5dfe25f00f89ff8.png
[format_png 3]: /images/20230209/a19c851816534408a0c54b8b709df3da.png
[kubernetes_k8s]: http://mp.weixin.qq.com/s?__biz=MzU0NjEwMTg4Mg%3D%3D&chksm=fb638a31cc14032772d778f1a8fa5dc73f9aba6c99546c9ab25d9f91f706be3cff34572f0c1a&idx=1&mid=2247484708&scene=21&sn=2a7230ade0ce0bd9059e92752e03ba18#wechat_redirect
[kubernetes]: https://blog.csdn.net/weixin_38320674/article/details/106369123
[DevOps]: https://blog.csdn.net/weixin_38320674/article/details/106435859
[kubernetes_-]: https://blog.csdn.net/weixin_38320674/article/details/106346164
[IT]: http://mp.weixin.qq.com/s?__biz=MzU0NjEwMTg4Mg%3D%3D&chksm=fb638c29cc14053fafcb62be244f5a279052b8d159c9c530e73495cfd8ab97205988780d4aaa&idx=1&mid=2247484220&scene=21&sn=72ae437836108fbecbeb86752aad888c#wechat_redirect
[kubernetes_-k8s]: https://blog.csdn.net/weixin_38320674/article/details/106030727
[kubernetes_-kubectl]: https://blog.csdn.net/weixin_38320674/article/details/106168939
[pod_pod_-]: https://blog.csdn.net/weixin_38320674/article/details/105697738
[Kubernetes_MySQL]: https://blog.csdn.net/weixin_38320674/article/details/106089098
[Prometheus_Grafana_Alertmanager_-]: https://blog.csdn.net/weixin_38320674/article/details/106294097
[k8s1.18_master_-]: https://blog.csdn.net/weixin_38320674/article/details/106089099
[k8s]: https://blog.csdn.net/weixin_38320674/article/details/105828889
[-tomcat]: https://blog.csdn.net/weixin_38320674/article/details/105926564
[linux]: https://blog.csdn.net/weixin_38320674/article/details/105985731
[kubernetes_volume]: https://blog.csdn.net/weixin_38320674/article/details/106536618
[kubernetes_ceph rbd_cephfs]: https://blog.csdn.net/weixin_38320674/article/details/106561781
[Alertmanager]: https://blog.csdn.net/weixin_38320674/article/details/106678752
[jenkins_kubernetes_harbor_gitlab_devops]: http://mp.weixin.qq.com/s?__biz=MzU0NjEwMTg4Mg%3D%3D&chksm=fb638d2fcc14043990967471ba8a2aaf389ab483594fd81395b5afda1c23a9eff4371df6bca4&idx=1&mid=2247483962&scene=21&sn=595eac335f7fb523bbb60cbbede109ca#wechat_redirect
[kubernetes_-flannel]: https://blog.csdn.net/weixin_38320674/article/details/107194597
[kubernetes_-calico]: https://blog.csdn.net/weixin_38320674/article/details/107171897
[kubernetes 1]: https://blog.csdn.net/weixin_38320674/article/details/107148403
[k8s 1]: https://blog.csdn.net/weixin_38320674/article/details/107133302
[-]: http://mp.weixin.qq.com/s?__biz=MzIzOTQ3NDg1Mw%3D%3D&chksm=e928c0bfde5f49a9990c672e4434f5ae7b74004dc1982cc44801c524b58067d9b245e5ba5b71&idx=1&mid=2247483765&scene=21&sn=b8444e82a93535425349b509ded4e4b6#wechat_redirect
[Prometheus_MySQL]: https://blog.csdn.net/weixin_38320674/article/details/107096764
[Prometheus_Nginx]: https://blog.csdn.net/weixin_38320674/article/details/107075580
[Prometheus_Tomcat]: https://blog.csdn.net/weixin_38320674/article/details/107054306
[linux 1]: http://mp.weixin.qq.com/s?__biz=MzIzOTQ3NDg1Mw%3D%3D&chksm=e928c0dede5f49c878898e04329f08d8adf554397476283aaa3f2554f71a8bf20986755fbcc9&idx=1&mid=2247483668&scene=21&sn=a7d0768b7eb034ef2e2f23e25b1b1845#wechat_redirect
[storageclass_pv]: https://blog.csdn.net/weixin_38320674/article/details/106866469
[k8s_yaml_gitlab]: https://blog.csdn.net/weixin_38320674/article/details/106846751
[helm_-_helm_k8s]: https://blog.csdn.net/weixin_38320674/article/details/106515349
[Prometheus Operator-_-]: https://blog.csdn.net/weixin_38320674/article/details/107274128
[Prometheus Operator-]: https://blog.csdn.net/weixin_38320674/article/details/107293871
[kubeconfig_k8s_dashboard ui]: https://blog.csdn.net/weixin_38320674/article/details/107308635
[format_png 4]: /images/20230209/c232ebb076cb4893a93e49e413ae0878.png
[format_png 5]: /images/20230209/6293a6df05784a359f33aead41809fdb.png