k8s的dashboard使用非安全端口 - Wed, Apr 8, 2020

k8s的dashboard使用非安全端口

1. 概述

k8s的dashboard默认使用安全端口，但是nginx-ingress在低版本时需要使用非安全端口进行代理。

2. dashboard的配置参数

此时9090为默认的非安全端口

        - name: kubernetes-dashboard
          image: 'kubernetesui/dashboard:v2.0.0-beta1'
          args:
            - '--namespace=kubernetes-dashboard'
            - '--enable-insecure-login'
            - '--token-ttl=0'
          ports:
            - containerPort: 8443
              protocol: TCP
            - containerPort: 9090
              protocol: TCP

3. 服务修改

spec:
  ports:
    - name: http
      protocol: TCP
      port: 80
      targetPort: 9090
  selector:
    k8s-app: kubernetes-dashboard
  clusterIP: 10.106.115.173
  type: ClusterIP
  sessionAffinity: None

4. ingress修改

kind: Ingress
apiVersion: extensions/v1beta1
metadata:
  name: dashboard-ingress
  namespace: kubernetes-dashboard
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/proxy-body-size: '0'
    nginx.ingress.kubernetes.io/proxy-read-timeout: '600'
    nginx.ingress.kubernetes.io/proxy-redirect-from: /
    nginx.ingress.kubernetes.io/proxy-redirect-to: $location_path/
    nginx.ingress.kubernetes.io/proxy-send-timeout: '600'
    nginx.ingress.kubernetes.io/rewrite-target: /
    nginx.ingress.kubernetes.io/service-upstream: 'true'
spec:
  rules:
    - http:
        paths:
          - path: /dashboard
            backend:
              serviceName: kubernetes-dashboard
              servicePort: 80