dashboard

How to add Kubernetes Dashboard to your cluster:

Step 1: Deploy the Kubernetes Dashboard

The Dashboard UI is not deployed by default. To deploy it, run the following command.

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta5/aio/deploy/recommended.yaml

Step 2: Create users to access the Dashboard

Create a new user using Service Account mechanism of Kubernetes.

kubectl create -f https://raw.githubusercontent.com/AATHITH/blog/master/kubernetes/dashboard/sa.yaml

Step 3: Create a Role

Create a role with admin privileges.

Warning: The sample role in here have admin privileges and it is for educational purposes only.

kubectl create -f https://raw.githubusercontent.com/AATHITH/blog/master/kubernetes/dashboard/cluster-role.yaml

Step 4: Create a Role-Binding

Create a Role-binding to bind the service account and roles created above.

kubectl create -f https://raw.githubusercontent.com/AATHITH/blog/master/kubernetes/dashboard/role-binding.yaml

Step 5: Get the bearer token

kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk '{print $1}')

This will print:

Name:         admin-user-token-v57nw
Namespace:    kubernetes-dashboard
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: admin-user
              kubernetes.io/service-account.uid: 0303243c-4040-4a58-8a47-849ee9ba79c1

Type:  kubernetes.io/service-account-token

Data
====
ca.crt:     1066 bytes
namespace:  20 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi11c2VyLXRva2VuLXY1N253Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImFkbWluLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiIwMzAzMjQzYy00MDQwLTRhNTgtOGE0Ny04NDllZTliYTc5YzEiLCJzdWIiOiJzeXN0ZW06c2Vydmls6

Step 6: Exposing the Dashboard

You can access Dashboard using two methods:

1. Kubectl command-line tool:

kubectl proxy

view your dashboard here.

Warning: The UI can only be accessed from the machine where the command is executed.

2. Kubernetes service NodePort:

   mkdir $HOME/certscd
   $HOME/certs
   openssl genrsa -out dashboard.key 2048openssl rsa -in dashboard.key -out dashboard.key
   openssl req -sha256 -new -key dashboard.key -out dashboard.csr -subj '/CN=localhost'
   openssl x509 -req -sha256 -days 365 -in dashboard.csr -signkey dashboard.key -out dashboard.crt
   kubectl delete secret kubernetes-dashboard-certs -n kubernetes-dashboard
   kubectl create secret generic kubernetes-dashboard-certs --**from**-file=dashboard.key --**from**-file=dashboard.crt -n kubernetes-dashboard

If you get an error like:
Can’t load /root/.rnd into RNG
140212358259136:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/root/.rnd solve this by commenting# RANDFILE = $ENV::HOME/.rnd in vi /etc/ssl/openssl.cnf

Change the service type to NodePort

kubectl edit service kubernetes-dashboard -n kubernetes-dashboard
...
type: ClusterIp --> type: NodePort
...

Step 7: Get Bearer Token

kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk '{print $1}')

Now copy the token and paste it into Enter token field on login screen.

Thats it. You have now successfully created a Dashboard for your Kubernetes cluster with a Bearer token.

Reference links:

https://medium.com/@sondnpt00343/deploying-a-publicly-accessible-kubernetes-dashboard-v2-0-0-betax-8e39680d4067 https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/ https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md