因为那道墙,在Docker For Windows Client中启用Kubernetes,并没有想象的那么顺利
git clone https://github.com/AliyunContainerService/k8s-for-docker-desktop.git(我的mac机器git有问题,还重新安装了git,参考这个xcode-select –install https://blog.csdn.net/blueheart20/article/details/78767806)
进入下载的目录,cd k8s-for-docker-desktop
git checkout v1.22.4 因为现在这个库最新就是v1.22.4
- 执行
./load_images.sh
- Enable Kubernetes
- 重启一下Docker
在终端输入KubeCtl cluster-info 会显示如下
Kubernetes control plane is running at https://kubernetes.docker.internal:6443 CoreDNS is running at https://kubernetes.docker.internal:6443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy
访问 https://kubernetes.docker.internal:6443 会显示
{ "kind": "Status", "apiVersion": "v1", "metadata": {}, "status": "Failure", "message": "forbidden: User \"system:anonymous\" cannot get path \"/\"", "reason": "Forbidden", "details": {}, "code": 403 }
证书问题 ,参考 https://blog.csdn.net/baidu_38432732/article/details/106469037,
grep 'client-certificate-data' ~/.kube/config | head -n 1 | awk '{print $2}' | base64 -d >> kubecfg.crt grep 'client-key-data' ~/.kube/config | head -n 1 | awk '{print $2}' | base64 -d >> kubecfg.key openssl pkcs12 -export -clcerts -inkey kubecfg.key -in kubecfg.crt -out kubecfg.p12 -name "kubernetes-client"
生成证书时要输入一个密码,然后在Finder里找到这个p12证书,双击,输入刚才的密码导入, 手工更改信任, 关闭浏览器
kubectl proxy
访问 http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/#/login
查找token来登录
kubectl -n kubernetes-dashboard describe secret admin-user Name: admin-user-token-br9kt Namespace: kubernetes-dashboard Labels: <none> Annotations: kubernetes.io/service-account.name: admin-user kubernetes.io/service-account.uid: 558c8398-b624-4ddf-9b7c-7d624b2ed71d Type: kubernetes.io/service-account-token Data ==== ca.crt: 1099 bytes namespace: 20 bytes token: eyJhbGciOiJSUzI1NiIsImtpZCI6InVjSm00Y243TThreDZ0dUJhUC1JNzJnSHJkWnp2cW1FOUNjYnQybERXc2MifQ.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.MXIgg556hWTUXxVgrZzI9aq5800TU5rz1A7jWFut9MkMxEHmFuCi8Ifor3lSpgfWWEaRJ4vWFYs26otOsdkNd8QtsyvYu3DnyhSeQ442WXiiMmr8J5Xk8en6vHjsclzidNF0_8dt8WKKutJH7CxsCoqByg-bwiQDR_qyiPaZ6jfaJzEVdbWNPDkDtVUGST4llvecNFCNCVfOnqq2JZdidiCqfY6ngx94Ti-pwtc-ScbVPDiKJwoACQoF6Iie6BBd4jAfR_BR-z0FZ8CXctdYqZT6u79I19z0GBCERXotqRKl6PnTvf2bHRjlG0BCAkdD0Oa4Ft2In2LPMmUrD2RjJA
https://www.jianshu.com/p/62444b2ed03f
【推荐】国内首个AI IDE,深度理解中文开发场景,立即下载体验Trae
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步
· 分享4款.NET开源、免费、实用的商城系统
· 全程不用写代码,我用AI程序员写了一个飞机大战
· MongoDB 8.0这个新功能碉堡了,比商业数据库还牛
· 白话解读 Dapr 1.15:你的「微服务管家」又秀新绝活了
· 记一次.NET内存居高不下排查解决与启示