随笔 - 435  文章 - 0  评论 - 110  阅读 - 62万 


因为那道墙,在Docker For Windows Client中启用Kubernetes,并没有想象的那么顺利

  1. git clone https://github.com/AliyunContainerService/k8s-for-docker-desktop.git(我的mac机器git有问题,还重新安装了git,参考这个xcode-select –install https://blog.csdn.net/blueheart20/article/details/78767806)
  2. 进入下载的目录,cd k8s-for-docker-desktop
  3. git checkout v1.22.4 因为现在这个库最新就是v1.22.4
  4. 执行./load_images.sh
  5. Enable Kubernetes
  6.  重启一下Docker

在终端输入KubeCtl cluster-info 会显示如下

Kubernetes control plane is running at https://kubernetes.docker.internal:6443
CoreDNS is running at https://kubernetes.docker.internal:6443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy

 

访问 https://kubernetes.docker.internal:6443 会显示

复制代码
{
"kind": "Status",
"apiVersion": "v1",
"metadata": {},
"status": "Failure",
"message": "forbidden: User \"system:anonymous\" cannot get path \"/\"",
"reason": "Forbidden",
"details": {},
"code": 403
}
复制代码

 证书问题 ,参考 https://blog.csdn.net/baidu_38432732/article/details/106469037,

grep 'client-certificate-data' ~/.kube/config | head -n 1 | awk '{print $2}' | base64 -d >> kubecfg.crt

grep 'client-key-data' ~/.kube/config | head -n 1 | awk '{print $2}' | base64 -d >> kubecfg.key

openssl pkcs12 -export -clcerts -inkey kubecfg.key -in kubecfg.crt -out kubecfg.p12 -name "kubernetes-client"

 

生成证书时要输入一个密码,然后在Finder里找到这个p12证书,双击,输入刚才的密码导入, 手工更改信任, 关闭浏览器

kubectl proxy

访问 http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/#/login

 查找token来登录

复制代码
kubectl -n kubernetes-dashboard describe secret admin-user
Name:         admin-user-token-br9kt
Namespace:    kubernetes-dashboard
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: admin-user
              kubernetes.io/service-account.uid: 558c8398-b624-4ddf-9b7c-7d624b2ed71d

Type:  kubernetes.io/service-account-token

Data
====
ca.crt:     1099 bytes
namespace:  20 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6InVjSm00Y243TThreDZ0dUJhUC1JNzJnSHJkWnp2cW1FOUNjYnQybERXc2MifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi11c2VyLXRva2VuLWJyOWt0Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImFkbWluLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiI1NThjODM5OC1iNjI0LTRkZGYtOWI3Yy03ZDYyNGIyZWQ3MWQiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZXJuZXRlcy1kYXNoYm9hcmQ6YWRtaW4tdXNlciJ9.MXIgg556hWTUXxVgrZzI9aq5800TU5rz1A7jWFut9MkMxEHmFuCi8Ifor3lSpgfWWEaRJ4vWFYs26otOsdkNd8QtsyvYu3DnyhSeQ442WXiiMmr8J5Xk8en6vHjsclzidNF0_8dt8WKKutJH7CxsCoqByg-bwiQDR_qyiPaZ6jfaJzEVdbWNPDkDtVUGST4llvecNFCNCVfOnqq2JZdidiCqfY6ngx94Ti-pwtc-ScbVPDiKJwoACQoF6Iie6BBd4jAfR_BR-z0FZ8CXctdYqZT6u79I19z0GBCERXotqRKl6PnTvf2bHRjlG0BCAkdD0Oa4Ft2In2LPMmUrD2RjJA
复制代码

 

 

 

 

https://www.jianshu.com/p/62444b2ed03f

 

posted on   Gu  阅读(600)  评论(0编辑  收藏  举报
相关博文:
阅读排行:
· 分享4款.NET开源、免费、实用的商城系统
· 全程不用写代码,我用AI程序员写了一个飞机大战
· MongoDB 8.0这个新功能碉堡了,比商业数据库还牛
· 白话解读 Dapr 1.15:你的「微服务管家」又秀新绝活了
· 记一次.NET内存居高不下排查解决与启示
点击右上角即可分享
微信分享提示