K8s 1.20.15 部署 K8s-Dashboard 应用教程：代码、只读 Token 生成

以下是部署 k8s-dashboard 应用的代码：

1. 创建 dashboard.yaml 文件：

apiVersion: v1
kind: ServiceAccount
metadata:
  name: kubernetes-dashboard
  namespace: kube-system

---

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: kubernetes-dashboard
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: kubernetes-dashboard
  namespace: kube-system

---

apiVersion: v1
kind: Service
metadata:
  name: kubernetes-dashboard
  namespace: kube-system
  labels:
    k8s-app: kubernetes-dashboard
spec:
  type: NodePort
  selector:
    k8s-app: kubernetes-dashboard
  ports:
  - name: http
    port: 80
    targetPort: 9090

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: kubernetes-dashboard
  namespace: kube-system
  labels:
    k8s-app: kubernetes-dashboard
spec:
  replicas: 1
  selector:
    matchLabels:
      k8s-app: kubernetes-dashboard
  template:
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
    spec:
      serviceAccountName: kubernetes-dashboard
      containers:
      - name: kubernetes-dashboard
        image: kubernetesui/dashboard:v2.3.1
        ports:
        - containerPort: 9090
        args:
        - --namespace=kube-system

2. 执行以下命令部署 k8s-dashboard 应用：

kubectl apply -f dashboard.yaml

3. 生成只读权限的 token：

kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep kubernetes-dashboard-token | awk '{print $1}')

以上操作将在 kube-system 命名空间中创建一个 kubernetes-dashboard 服务，并将其部署为一个 Deployment。然后，我们可以使用 kubectl 命令生成一个只读权限的 token，以便访问 k8s-dashboard 应用。