43 lines
1.0 KiB
Markdown
43 lines
1.0 KiB
Markdown
|
### 1. docker部署 kubepi
|
|||
|
|
|
|||
|
|
```bash
|
|||
|
|
docker run --privileged -d --name kubepi --network=internal -v /root/data/kubepi:/var/lib/kubepi -p 8180:80 --restart=unless-stopped 1panel/kubepi
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 2. 创建用户，绑定集群管理员角色
|
|||
|
|
|
|||
|
|
```bash
|
|||
|
|
kubectl create sa kubepi-user -n kube-system
|
|||
|
|
kubectl create clusterrolebinding kubepi-user --clusterrole=cluster-admin --serviceaccount=kube-system:kubepi-user
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 3. 获得token
|
|||
|
|
|
|||
|
|
- k8s小于1.27版本自动创建secret
|
|||
|
|
|
|||
|
|
```bash
|
|||
|
|
kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep kubepi-user | awk '{print $1}') | grep token: | awk '{print $2}'
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- k8s大于等于1.27版本取消自动创建token，需要手动创建
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
apiVersion: v1
|
|||
|
|
kind: Secret
|
|||
|
|
metadata:
|
|||
|
|
name: secret-kubepi-user
|
|||
|
|
namespace: kube-system
|
|||
|
|
annotations:
|
|||
|
|
kubernetes.io/service-account.name: kubepi-user
|
|||
|
|
type: kubernetes.io/service-account-token
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- 创建secret后获取token
|
|||
|
|
|
|||
|
|
```bash
|
|||
|
|
kubectl describe secret secret-kubepi-user -n kube-system | grep token: | awk '{ print $2}'
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|