为kubernetes-dashboard创建token,方便页面访问

在公网可以使用命令操作k8s后,然后安装kubernetes-dashboard发现,执行 kubectl proxy 可以打开 http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/,

但是没有权限访问,需要创建token访问.

Creating a Service Account

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard

Creating a ClusterRoleBinding

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
  - kind: ServiceAccount
    name: admin-user
    namespace: kubernetes-dashboard

Getting a Bearer Token for ServiceAccount

kubectl -n kubernetes-dashboard create token admin-user

References

• creating-sample-user