¶ Kubernetes Dashboard
아래
v2.4.0/aio/deploy/recommended.yaml방식은 끝났다. Dashboard 7.x 는 Helm 차트로만 설치하며 (helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/·helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace -n kubernetes-dashboard), 로그인 토큰은 1.24 부터 Secret 이 자동 생성되지 않으므로kubectl -n kubernetes-dashboard create token admin-user로 만든다. 최신 차트 kubernetes-dashboard-7.14.0 — 2026-09-20 확인. https://github.com/kubernetes/dashboard/releases
¶ 설정 변경
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.4.0/aio/deploy/recommended.yaml
- 명령을 실행하면 적용이 되지만 기본 값으로 설치 할 경우 kubernetes 마스터 노드에서 loopback 주소로만 접근이 가능하다.
위 주소나 https://github.com/kubernetes/dashboard 에서 yaml 파일을 다운로드하여 수정한다.
# ...중략...
kind: Service
apiVersion: v1
metadata:
labels:
k8s-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kubernetes-dashboard
spec:
type: LoadBalancer
ports:
- port: 443
targetPort: 8443
nodePort: 30011
selector:
k8s-app: kubernetes-dashboard
#...중략...
- image 정보도 적절히 수정 해 준다.
¶ 확인
kubectl get all --all-namespaces
NAMESPACE NAME READY STATUS RESTARTS AGE
...중략...
kube-system pod/metrics-server-fb8d4747b-pz5nt 1/1 Running 0 64m
kubernetes-dashboard pod/dashboard-metrics-scraper-7bf7f8bcb8-4jnkz 1/1 Running 0 3d
kubernetes-dashboard pod/kubernetes-dashboard-d89995856-sjwmr 1/1 Running 0 3d
rook-ceph pod/csi-cephfsplugin-h482c 3/3 Running 0 16h
...중략...
NAMESPACE NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
default service/kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 7d14h
kube-system service/kube-dns ClusterIP 10.96.0.10 <none> 53/UDP,53/TCP,9153/TCP 7d14h
kube-system service/metrics-server ClusterIP 10.102.148.117 <none> 443/TCP 64m
kubernetes-dashboard service/dashboard-metrics-scraper ClusterIP 10.108.25.221 <none> 8000/TCP 3d
kubernetes-dashboard service/kubernetes-dashboard NodePort 10.102.141.70 <none> 443:30443/TCP 17h
rook-ceph service/csi-cephfsplugin-metrics ClusterIP 10.106.110.230 <none> 8080/TCP,8081/TCP 16h
...중략...
NAMESPACE NAME DESIRED CURRENT READY UP-TO-DATE AVAILABLE NODE SELECTOR AGE
kube-system daemonset.apps/kube-flannel-ds 4 4 4 4 4 <none> 7d14h
kube-system daemonset.apps/kube-proxy 4 4 4 4 4 kubernetes.io/os=linux 7d14h
rook-ceph daemonset.apps/csi-cephfsplugin 3 3 3 3 3 <none> 16h
rook-ceph daemonset.apps/csi-rbdplugin 3 3 3 3 3 <none> 16h
NAMESPACE NAME READY UP-TO-DATE AVAILABLE AGE
kube-system deployment.apps/coredns 2/2 2 2 7d14h
kube-system deployment.apps/metrics-server 1/1 1 1 64m
kubernetes-dashboard deployment.apps/dashboard-metrics-scraper 1/1 1 1 3d
kubernetes-dashboard deployment.apps/kubernetes-dashboard 1/1 1 1 3d
rook-ceph deployment.apps/csi-cephfsplugin-provisioner 2/2 2 2 16h
...중략...
NAMESPACE NAME DESIRED CURRENT READY AGE
kube-system replicaset.apps/coredns-78fcd69978 2 2 2 7d14h
kube-system replicaset.apps/metrics-server-fb8d4747b 1 1 1 64m
kubernetes-dashboard replicaset.apps/dashboard-metrics-scraper-7bf7f8bcb8 1 1 1 3d
kubernetes-dashboard replicaset.apps/kubernetes-dashboard-d89995856 1 1 1 3d
...중략...
NAMESPACE NAME COMPLETIONS DURATION AGE
rook-ceph job.batch/rook-ceph-osd-prepare-nodet01 1/1 3s 16h
... 생략...
- 최종적으로 kubernetes-dashboard namespace에 kubernetes-dashboard와 kubernetes-scrpter pod이 구동된다.
sudo netstat -nltp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
...중략...
tcp 0 0 0.0.0.0:30443 0.0.0.0:* LISTEN 93968/kube-proxy
...생략
¶ 토큰 생성
로그인을 위해 토큰 생성이 필요하다.
¶ 서비스 계정 생성
cat <<EOF | kubectl create -f -
apiVersion: v1
kind: ServiceAccount
metadata:
name: admin-user
namespace: kube-system
EOF
serviceaccount/admin-user created
¶ cluster role binding
cat <<EOF | kubectl create -f -
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: admin-user
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: admin-user
namespace: kube-system
EOF
clusterrolebinding.rbac.authorization.k8s.io/admin-user created
¶ 토큰 확인
kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')
Name: admin-user-token-p9ldd
Namespace: kube-system
Labels: <none>
Annotations: kubernetes.io/service-account.name=admin-user
kubernetes.io/service-account.uid=011cb1ec-11a-49b6-8900-6dc90fc111111
Type: kubernetes.io/service-account-token
Data
====
ca.crt: 1025 bytes
namespace: 11 bytes
token: ${MASKED}
¶ UI 예시
 |
 |