Kubernetes是一个开源的 Linux 容器自动化运维平台，它消除了容器化应用程序在部署、伸缩时涉及到的许多手动操作。换句话说，你可以将多台主机组合成集群来运行 Linux 容器，而 Kubernetes 可以帮助你简单高效地管理那些集群。

查看系统版本

[root@localhost]#cat/etc/centos-releaseCentOSLinuxrelease8.1.1911(Core)配置网络

[root@localhost~]#cat/etc/sysconfig/network-scripts/ifcfg-enp0s3TYPE=EthernetPROXY_METHOD=noneBROWSER_ONLY=noBOOTPROTO=staticDEFROUTE=yesIPV4_FAILURE_FATAL=noIPV6INIT=yesIPV6_AUTOCONF=yesIPV6_DEFROUTE=yesIPV6_FAILURE_FATAL=noIPV6_ADDR_GEN_MODE=stable-privacyNAME=enp0s3UUID=039303a5-c70d-4973-8c91-97eaa071c23dDEVICE=enp0s3ONBOOT=yesIPADDR=192.168.122.21NETMASK=255.255.255.0GATEWAY=192.168.122.1DNS1=223.5.5.5

添加阿里源

[root@localhost~]#rm-rfv/etc/yum.repos.d/*[root@localhost~]#curl-o/etc/yum.repos.d/CentOS-Base.repohttp://mirrors.aliyun.com/repo/Centos-8.repo

配置主机名

[root@master01~]#cat/etc/hosts127.0.0.1localhostlocalhost.localdomainlocalhost4localhost4.localdomain4::1localhostlocalhost.localdomainlocalhost6localhost6.localdomain6192.168.122.21master01.paas.commaster01

关闭swap，注释swap分区

[root@master01~]#swapoff-a[root@master01~]#cat/etc/fstab##/etc/fstab#CreatedbyanacondaonTueMar3122:44:342020##Accessiblefilesystems,byreference,aremaintainedunder'/dev/disk/'.#Seemanpagesfstab(5),findfs(8),mount(8)and/orblkid(8)formoreinfo.##Aftereditingthisfile,run'systemctldaemon-reload'toupdatesystemd#unitsgeneratedfromthisfile.#/dev/mapper/cl-root/xfsdefaults00UUID=5fecb240-379b-4331-ba04-f41338e81a6e/bootext4defaults12/dev/mapper/cl-home/homexfsdefaults00#/dev/mapper/cl-swapswapswapdefaults00

配置内核参数，将桥接的IPv4流量传递到iptables的链

[root@master01~]#vim/etc/sysctl.d/k8s.confnet.bridge.bridge-nf-call-ip6tables=1net.bridge.bridge-nf-call-iptables=1sysctl--system安装常用包

[root@master01~]#yuminstallvimbash-completionnet-toolsgcc-y

使用aliyun源安装docker-ce

[root@master01~]#yuminstall-yyum-utilsdevice-mapper-persistent-datalvm2[root@master01~]#yum-config-manager--add-repohttps://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo[root@master01~]#yum-yinstalldocker-ce

安装docker-ce如果出现以下错

[root@master01~]#yum-yinstalldocker-ceCentOS-8-Base-mirrors.aliyun.com14kB/s|3.8kB00:00CentOS-8-Extras-mirrors.aliyun.com6.4kB/s|1.5kB00:00CentOS-8-AppStream-mirrors.aliyun.com16kB/s|4.3kB00:00DockerCEStable-x86_6440kB/s|22kB00:00Error:Problem:packagedocker-ce-3:19.03.8-3.el7.x86_64requirescontainerd.io>=1.2.2-3,butnoneoftheproviderscanbeinstalled-cannotinstallthebestcandidateforthejob-packagecontainerd.io-1.2.10-3.2.el7.x86_64isexcluded-packagecontainerd.io-1.2.13-3.1.el7.x86_64isexcluded-packagecontainerd.io-1.2.2-3.3.el7.x86_64isexcluded-packagecontainerd.io-1.2.2-3.el7.x86_64isexcluded-packagecontainerd.io-1.2.4-3.1.el7.x86_64isexcluded-packagecontainerd.io-1.2.5-3.1.el7.x86_64isexcluded-packagecontainerd.io-1.2.6-3.3.el7.x86_64isexcluded(trytoadd'--skip-broken'toskipuninstallablepackagesor'--nobest'tousenotonlybestcandidatepackages)

解决方法

[root@master01~]#wgethttps://download.docker.com/linux/centos/7/x86_64/edge/Packages/containerd.io-1.2.6-3.3.el7.x86_64.rpm[root@master01~]#yuminstallcontainerd.io-1.2.6-3.3.el7.x86_64.rpm

然后再安装docker-ce即可成功

添加aliyundocker仓库加速器

[root@master01~]#mkdir-p/etc/docker[root@master01~]#tee/etc/docker/daemon.json安装kubectl、kubelet、kubeadm

添加阿里kubernetes源

[root@master01~]#cat

安装

[root@master01~]#yuminstallkubectlkubeletkubeadm[root@master01~]#systemctlenablekubelet初始化k8s集群

[root@master01~]#kubeadminit--kubernetes-version=1.18.0\--apiserver-advertise-address=192.168.122.21\--image-repositoryregistry.aliyuncs.com/google_containers\--service-cidr=10.10.0.0/16--pod-network-cidr=10.122.0.0/16

POD的网段为: 10.122.0.0/16， api server地址就是master本机IP。

这一步很关键，由于kubeadm 默认从官网k8s.grc.io下载所需镜像，国内无法访问，因此需要通过–image-repository指定阿里云镜像仓库地址。

集群初始化成功后返回如下信息：

W040809:36:36.12160314098configset.go:202]WARNING:kubeadmcannotvalidatecomponentconfigsforAPIgroups[kubelet.config.k8s.iokubeproxy.config.k8s.io][init]UsingKubernetesversion:v1.18.0[preflight]Runningpre-flightchecks[WARNINGFileExisting-tc]:tcnotfoundinsystempath[preflight]PullingimagesrequiredforsettingupaKubernetescluster[preflight]Thismighttakeaminuteortwo,dependingonthespeedofyourinternetconnection[preflight]Youcanalsoperformthisactioninbeforehandusing'kubeadmconfigimagespull'[kubelet-start]Writingkubeletenvironmentfilewithflagstofile"/var/lib/kubelet/kubeadm-flags.env"[kubelet-start]Writingkubeletconfigurationtofile"/var/lib/kubelet/config.yaml"[kubelet-start]Startingthekubelet[certs]UsingcertificateDirfolder"/etc/kubernetes/pki"[certs]Generating"ca"certificateandkey[certs]Generating"apiserver"certificateandkey[certs]apiserverservingcertissignedforDNSnames[master01.paas.comkuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local]andIPs[10.10.0.1192.168.122.21][certs]Generating"apiserver-kubelet-client"certificateandkey[certs]Generating"front-proxy-ca"certificateandkey[certs]Generating"front-proxy-client"certificateandkey[certs]Generating"etcd/ca"certificateandkey[certs]Generating"etcd/server"certificateandkey[certs]etcd/serverservingcertissignedforDNSnames[master01.paas.comlocalhost]andIPs[192.168.122.21127.0.0.1::1][certs]Generating"etcd/peer"certificateandkey[certs]etcd/peerservingcertissignedforDNSnames[master01.paas.comlocalhost]andIPs[192.168.122.21127.0.0.1::1][certs]Generating"etcd/healthcheck-client"certificateandkey[certs]Generating"apiserver-etcd-client"certificateandkey[certs]Generating"sa"keyandpublickey[kubeconfig]Usingkubeconfigfolder"/etc/kubernetes"[kubeconfig]Writing"admin.conf"kubeconfigfile[kubeconfig]Writing"kubelet.conf"kubeconfigfile[kubeconfig]Writing"controller-manager.conf"kubeconfigfile[kubeconfig]Writing"scheduler.conf"kubeconfigfile[control-plane]Usingmanifestfolder"/etc/kubernetes/manifests"[control-plane]CreatingstaticPodmanifestfor"kube-apiserver"[control-plane]CreatingstaticPodmanifestfor"kube-controller-manager"W040809:36:43.34319114098manifests.go:225]thedefaultkube-apiserverauthorization-modeis"Node,RBAC";using"Node,RBAC"[control-plane]CreatingstaticPodmanifestfor"kube-scheduler"W040809:36:43.34430314098manifests.go:225]thedefaultkube-apiserverauthorization-modeis"Node,RBAC";using"Node,RBAC"[etcd]CreatingstaticPodmanifestforlocaletcdin"/etc/kubernetes/manifests"[wait-control-plane]WaitingforthekubelettobootupthecontrolplaneasstaticPodsfromdirectory"/etc/kubernetes/manifests".Thiscantakeupto4m0s[apiclient]Allcontrolplanecomponentsarehealthyafter23.002541seconds[upload-config]StoringtheconfigurationusedinConfigMap"kubeadm-config"inthe"kube-system"Namespace[kubelet]CreatingaConfigMap"kubelet-config-1.18"innamespacekube-systemwiththeconfigurationforthekubeletsinthecluster[upload-certs]Skippingphase.Pleasesee--upload-certs[mark-control-plane]Markingthenodemaster01.paas.comascontrol-planebyaddingthelabel"node-role.kubernetes.io/master=''"[mark-control-plane]Markingthenodemaster01.paas.comascontrol-planebyaddingthetaints[node-role.kubernetes.io/master:NoSchedule][bootstrap-token]Usingtoken:v2r5a4.veazy2xhzetpktfz[bootstrap-token]Configuringbootstraptokens,cluster-infoConfigMap,RBACRoles[bootstrap-token]configuredRBACrulestoallowNodeBootstraptokenstogetnodes[bootstrap-token]configuredRBACrulestoallowNodeBootstraptokenstopostCSRsinorderfornodestogetlongtermcertificatecredentials[bootstrap-token]configuredRBACrulestoallowthecsrapprovercontrollerautomaticallyapproveCSRsfromaNodeBootstrapToken[bootstrap-token]configuredRBACrulestoallowcertificaterotationforallnodeclientcertificatesinthecluster[bootstrap-token]Creatingthe"cluster-info"ConfigMapinthe"kube-public"namespace[kubelet-finalize]Updating"/etc/kubernetes/kubelet.conf"topointtoarotatablekubeletclientcertificateandkey[addons]Appliedessentialaddon:CoreDNS[addons]Appliedessentialaddon:kube-proxyYourKubernetescontrol-planehasinitializedsuccessfully!Tostartusingyourcluster,youneedtorunthefollowingasaregularuser:mkdir-p$HOME/.kubesudocp-i/etc/kubernetes/admin.conf$HOME/.kube/configsudochown$(id-u):$(id-g)$HOME/.kube/configYoushouldnowdeployapodnetworktothecluster.Run"kubectlapply-f[podnetwork].yaml"withoneoftheoptionslistedat:https://kubernetes.io/docs/concepts/cluster-administration/addons/Thenyoucanjoinanynumberofworkernodesbyrunningthefollowingoneachasroot:kubeadmjoin192.168.122.21:6443--tokenv2r5a4.veazy2xhzetpktfz\--discovery-token-ca-cert-hashsha256:daded8514c8350f7c238204979039ff9884d5b595ca950ba8bbce80724fd65d4[root@master01~]#

记录生成的最后部分内容，此内容需要在其它节点加入Kubernetes集群时执行。

根据提示创建kubectl

[root@master01~]#mkdir-p$HOME/.kube[root@master01~]#sudocp-i/etc/kubernetes/admin.conf$HOME/.kube/config[root@master01~]#sudochown$(id-u):$(id-g)$HOME/.kube/config

执行下面命令，使kubectl可以自动补充

[root@master01~]#source

查看节点，pod

[root@master01~]#kubectlgetnodeNAMESTATUSROLESAGEVERSIONmaster01.paas.comNotReadymaster2m29sv1.18.0[root@master01~]#kubectlgetpod--all-namespacesNAMESPACENAMEREADYSTATUSRESTARTSAGEkube-systemcoredns-7ff77c879f-fsj9l0/1Pending02m12skube-systemcoredns-7ff77c879f-q5ll20/1Pending02m12skube-systemetcd-master01.paas.com1/1Running02m22skube-systemkube-apiserver-master01.paas.com1/1Running02m22skube-systemkube-controller-manager-master01.paas.com1/1Running02m22skube-systemkube-proxy-th5721/1Running02m12skube-systemkube-scheduler-master01.paas.com1/1Running02m22s[root@master01~]#

node节点为NotReady，因为corednspod没有启动，缺少网络pod

[root@master01~]#kubectlapply-fhttps://docs.projectcalico.org/manifests/calico.yamlconfigmap/calico-configcreatedcustomresourcedefinition.apiextensions.k8s.io/bgpconfigurations.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/bgppeers.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/blockaffinities.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/clusterinformations.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/felixconfigurations.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/globalnetworkpolicies.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/globalnetworksets.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/hostendpoints.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/ipamblocks.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/ipamconfigs.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/ipamhandles.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/ippools.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/networkpolicies.crd.projectcalico.orgcreatedcustomresourcedefinition.apiextensions.k8s.io/networksets.crd.projectcalico.orgcreatedclusterrole.rbac.authorization.k8s.io/calico-kube-controllerscreatedclusterrolebinding.rbac.authorization.k8s.io/calico-kube-controllerscreatedclusterrole.rbac.authorization.k8s.io/calico-nodecreatedclusterrolebinding.rbac.authorization.k8s.io/calico-nodecreateddaemonset.apps/calico-nodecreatedserviceaccount/calico-nodecreateddeployment.apps/calico-kube-controllerscreatedserviceaccount/calico-kube-controllerscreated

查看pod和node

[root@master01~]#kubectlgetpod--all-namespacesNAMESPACENAMEREADYSTATUSRESTARTSAGEkube-systemcalico-kube-controllers-555fc8cc5c-k8rbk1/1Running036skube-systemcalico-node-5km271/1Running036skube-systemcoredns-7ff77c879f-fsj9l1/1Running05m22skube-systemcoredns-7ff77c879f-q5ll21/1Running05m22skube-systemetcd-master01.paas.com1/1Running05m32skube-systemkube-apiserver-master01.paas.com1/1Running05m32skube-systemkube-controller-manager-master01.paas.com1/1Running05m32skube-systemkube-proxy-th5721/1Running05m22skube-systemkube-scheduler-master01.paas.com1/1Running05m32s[root@master01~]#kubectlgetnodeNAMESTATUSROLESAGEVERSIONmaster01.paas.comReadymaster5m47sv1.18.0[root@master01~]#

此时集群状态正常

官方部署dashboard的服务没使用nodeport，将yaml文件下载到本地，在service里添加nodeport

[root@master01~]#wgethttps://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-rc7/aio/deploy/recommended.yaml[root@master01~]#vimrecommended.yamlkind:ServiceapiVersion:v1metadata:labels:k8s-app:kubernetes-dashboardname:kubernetes-dashboardnamespace:kubernetes-dashboardspec:type:NodePortports:-port:443targetPort:8443nodePort:30000selector:k8s-app:kubernetes-dashboard[root@master01~]#kubectlcreate-frecommended.yamlnamespace/kubernetes-dashboardcreatedserviceaccount/kubernetes-dashboardcreatedservice/kubernetes-dashboardcreatedsecret/kubernetes-dashboard-certscreatedsecret/kubernetes-dashboard-csrfcreatedsecret/kubernetes-dashboard-key-holdercreatedconfigmap/kubernetes-dashboard-settingscreatedrole.rbac.authorization.k8s.io/kubernetes-dashboardcreatedclusterrole.rbac.authorization.k8s.io/kubernetes-dashboardcreatedrolebinding.rbac.authorization.k8s.io/kubernetes-dashboardcreatedclusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboardcreateddeployment.apps/kubernetes-dashboardcreatedservice/dashboard-metrics-scrapercreateddeployment.apps/dashboard-metrics-scrapercreated

查看pod，service

NAMEREADYSTATUSRESTARTSAGEdashboard-metrics-scraper-dc6947fbf-869kf1/1Running037skubernetes-dashboard-5d4dc8b976-sdxxt1/1Running037s[root@master01~]#kubectlgetsvc-nkubernetes-dashboardNAMETYPECLUSTER-IPEXTERNAL-IPPORT(S)AGEdashboard-metrics-scraperClusterIP10.10.58.938000/TCP44skubernetes-dashboardNodePort10.10.132.66443:30000/TCP44s[root@master01~]#

使用token进行登录，执行下面命令获取token

[root@master01~]#kubectldescribesecrets-nkubernetes-dashboardkubernetes-dashboard-token-t4hxz|greptoken|awk'NR==3{print$2}'eyJhbGciOiJSUzI1NiIsImtpZCI6IlhJaDgyTWEzZ3FtWE9hTnJqUHN1akdHZU1pRHN3QWM2RUlQbUVOT0g0Qm8ifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJrdWJlcm5ldGVzLWRhc2hib2FyZC10b2tlbi10NGh5eiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6ImUxOWYwMGI5LTI3MWItNDY5OS1hMjI3LTAzZWEyZTllMDE4YiIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDprdWJlcm5ldGVzLWRhc2hib2FyZDprdWJlcm5ldGVzLWRhc2hib2FyZCJ9.Mcw9zYSbTfhaYV38vlEaI0CSomYLtb05F2AIGpyT_PjIN8xmRdnIQhWGANBDuuDjdxScSXHOytHAKdj3pzBFVw_lfU5PseBg6hmdv_EPFPh3GvRd9XCs0TE5CVX8qfHkAGKc-DltA7jPwt5VqIFjnolLLGXB-exhiU73YMG_Xy9dZE-u0KKCvSq7XZDR87P_X30JYCAZXDlxcv8iOsuI4I-wlacm6LRF6HgyJqctJNVyE7seVVIgLqetAtt9LicTo6BBozbefHeK6zqRYeITU8AHhe-PLS4xo2fey5up77v4vyPHy_SEnKOtZcBzje1XKNPolGfiXItLYF7u95m9_A

通过查看dashboard日志，得到如下 信息

[root@master01~]#kubectllogs-f-nkubernetes-dashboardkubernetes-dashboard-5d4dc8b976-sdxxt2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:namespacesisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"namespaces"inAPIgroup""attheclusterscope2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0GET/api/v1/cronjob/default?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0801:54:31Gettinglistofallcronjobsinthecluster2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:cronjobs.batchisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"cronjobs"inAPIgroup"batch"inthenamespace"default"2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0POST/api/v1/token/refreshrequestfrom192.168.122.21:7788:{contentshidden}2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0GET/api/v1/daemonset/default?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0GET/api/v1/deployment/default?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:daemonsets.appsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"daemonsets"inAPIgroup"apps"inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:podsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"pods"inAPIgroup""inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:eventsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"events"inAPIgroup""inthenamespace"default"2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0GET/api/v1/csrftoken/tokenrequestfrom192.168.122.21:7788:2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31Gettinglistofalldeploymentsinthecluster2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:deployments.appsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"deployments"inAPIgroup"apps"inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:podsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"pods"inAPIgroup""inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:eventsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"events"inAPIgroup""inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:replicasets.appsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"replicasets"inAPIgroup"apps"inthenamespace"default"2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0GET/api/v1/job/default?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0GET/api/v1/pod/default?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0801:54:31Gettinglistofalljobsinthecluster2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:jobs.batchisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"jobs"inAPIgroup"batch"inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:podsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"pods"inAPIgroup""inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:eventsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"events"inAPIgroup""inthenamespace"default"2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31Gettinglistofallpodsinthecluster2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:podsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"pods"inAPIgroup""inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:eventsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"events"inAPIgroup""inthenamespace"default"2020/04/0801:54:31Gettingpodmetrics2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0GET/api/v1/replicaset/default?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0801:54:31Gettinglistofallreplicasetsinthecluster2020/04/0801:54:31[2020-04-08T01:54:31Z]IncomingHTTP/2.0GET/api/v1/replicationcontroller/default?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:replicasets.appsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"replicasets"inAPIgroup"apps"inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:podsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"pods"inAPIgroup""inthenamespace"default"2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:eventsisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"events"inAPIgroup""inthenamespace"default"2020/04/0801:54:31[2020-04-08T01:54:31Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0801:54:31Gettinglistofallreplicationcontrollersinthecluster2020/04/0801:54:31Non-criticalerroroccurredduringresourceretrieval:replicationcontrollersisforbidden:User"system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard"cannotlistresource"replicationcontrollers"inAPIgroup""inthenamespace"default"

解决方法

[root@master01~]#kubectlcreateclusterrolebindingserviceaccount-cluster-admin--clusterrole=cluster-admin--group=system:serviceaccountclusterrolebinding.rbac.authorization.k8s.io/serviceaccount-cluster-admincreated

查看dashboard日志

[root@master01~]#kubectllogs-f-nkubernetes-dashboardkubernetes-dashboard-5d4dc8b976-sdxx2020/04/0802:07:03Gettinglistofnamespaces2020/04/0802:07:03[2020-04-08T02:07:03Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:08[2020-04-08T02:07:08Z]IncomingHTTP/2.0GET/api/v1/node?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0802:07:08[2020-04-08T02:07:08Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:08[2020-04-08T02:07:08Z]IncomingHTTP/2.0GET/api/v1/namespacerequestfrom192.168.122.21:7788:2020/04/0802:07:08Gettinglistofnamespaces2020/04/0802:07:08[2020-04-08T02:07:08Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:13[2020-04-08T02:07:13Z]IncomingHTTP/2.0GET/api/v1/node?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0802:07:13[2020-04-08T02:07:13Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:13[2020-04-08T02:07:13Z]IncomingHTTP/2.0GET/api/v1/namespacerequestfrom192.168.122.21:7788:2020/04/0802:07:13Gettinglistofnamespaces2020/04/0802:07:13[2020-04-08T02:07:13Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:18[2020-04-08T02:07:18Z]IncomingHTTP/2.0GET/api/v1/node?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0802:07:18[2020-04-08T02:07:18Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:18[2020-04-08T02:07:18Z]IncomingHTTP/2.0GET/api/v1/namespacerequestfrom192.168.122.21:7788:2020/04/0802:07:18Gettinglistofnamespaces2020/04/0802:07:18[2020-04-08T02:07:18Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:23[2020-04-08T02:07:23Z]IncomingHTTP/2.0GET/api/v1/node?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0802:07:23[2020-04-08T02:07:23Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:23[2020-04-08T02:07:23Z]IncomingHTTP/2.0GET/api/v1/namespacerequestfrom192.168.122.21:7788:2020/04/0802:07:23Gettinglistofnamespaces2020/04/0802:07:23[2020-04-08T02:07:23Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:28[2020-04-08T02:07:28Z]IncomingHTTP/2.0GET/api/v1/node?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0802:07:28[2020-04-08T02:07:28Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:28[2020-04-08T02:07:28Z]IncomingHTTP/2.0GET/api/v1/namespacerequestfrom192.168.122.21:7788:2020/04/0802:07:28Gettinglistofnamespaces2020/04/0802:07:28[2020-04-08T02:07:28Z]Outcomingresponseto192.168.122.21:7788with200statuscode2020/04/0802:07:33[2020-04-08T02:07:33Z]IncomingHTTP/2.0GET/api/v1/node?itemsPerPage=10&page=1&sortBy=d,creationTimestamprequestfrom192.168.122.21:7788:2020/04/0802:07:33[2020-04-08T02:07:33Z]Outcomingresponseto192.168.122.21:7788with200statuscode

此时再查看dashboard，即可看到有资源展示