- 根据官方文档
- https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md
- 创建dashboard-adminuser.yaml
apiVersion: v1 kind: ServiceAccount metadata: name: admin-user namespace: kubernetes-dashboard
- 执行 kubectl apply -f dashboard-adminuser.yaml
- 创建admin-user-role-binding.yaml
apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: admin-user roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: admin-user namespace: kubernetes-dashboard
- 执行kubectl create -f admin-user-role-binding.yaml
clusterrolebinding.rbac.authorization.k8s.io/admin-user created
-
生成token
➜ kubectl -n kubernetes-dashboard get secret $(kubectl -n kubernetes-dashboard get sa/admin-user -o jsonpath="{.secrets[0].name}") -o go-template="{{.data.token | base64decode}}" eyJcdGciOiJSUzI1NiIsImtpZCI6IjByaWotQUN0TWVxTUZwNXlTaFJKMzZaTlpuNmliSWRCQ0NnaldNYWV3eUEifQ.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.VHJrN23QG8xvl5ervkDVhzZ6PoB1-mOJR418YyF6-DJ1TLMr_imZE8-z8TKMUyg61JWliu2aboibyLrOOAZCfRIv33AhntOGhoj9vYDP6HdnvOYEEwsHlGF1gPE19ENijh83GqNaTIIsAJwz1dV-Koif8lzermpaV0Qsy2FnWyzorEKEv4aZ5kOxcWrOdCcyGzhA7jKdK--vI6suIUxPeKho2w_mrkNlWv4Tk_g9Y0NwVhy6IRYpsLtOJsCyUEdcLiIxhf9-VBAgR1EOxM6913Mgo3AaCHmlAAPBzFcued4yMrynbRnlRo3maHjS5T0h2FKRvj_Sedi6jX1v1QNKhg -
输入token
-
点击登录显示如下页面
