K8S可视化工具

最后发布时间 : 2024-10-28 17:56:18 浏览量 :

Kubernetes Dashboard: https://github.com/kubernetes/dashboard、安装参考
KubeSphere: https://kubesphere.io/
Rancher: https://rancher.com/
Lens: https://k8slens.dev/
Octant: https://octant.dev/
K9s: https://k9scli.io/
Shipyard: https://shipyard-project.io/
Kontena Lens: https://www.kontena.io/lens/
Kubernetic: https://kubernetic.com/
Loodse Kubermatic: https://www.kubermatic.com/
Portainer: https://www.portainer.io/
Kubevious: https://kubevious.io/
Kuboard: https://github.com/eip-work/kuboard-press
Grafana: https://grafana.com/
Weave Scope: https://www.weave.works/oss/scope/

Get token for login

kubectl -n kubernetes-dashboard get secret admin-user-secret -o jsonpath="{.data.token}" | base64 -d

K8S Dashboard：
作为K8S官方提供的仪表盘工具，它以简洁而直观的界面展示和管理K8S集群中的各类资源。

KubeSphere：
作为一款开源的K8S平台，KubeSphere为你提供了可视化的控制台和管理界面，助你轻松管理应用程序的部署、监控和日志查看等功能。

Rancher：
作为一个开源的容器管理平台，Rancher支持多个K8S集群的管理，具备强大的应用程序管理、监控和自动化部署等功能。

Lens：
作为一款跨平台的K8S可视化工具，Lens支持Windows、macOS和Linux操作系统，提供直观的界面，帮助你查看和操作K8S集群中的各种资源。

Octant：
作为一款开源的K8S可视化工具，Octant提供了简洁而功能丰富的用户界面，支持自定义插件和扩展，助你更好地查看和管理K8S集群。

K9s：
作为一款基于终端的K8S管理工具，K9s提供了交互式的界面，让你可以轻松查看和操作K8S资源，实时监控、日志查看、资源过滤等功能一应俱全。

Shipyard：
作为一款开源的容器管理平台，Shipyard提供了可视化界面，帮助你管理和监控K8S集群，支持应用程序部署、资源管理和事件触发等功能。

Kontena Lens：
作为一款跨平台的K8S管理工具，Kontena Lens提供了直观的用户界面，让你可以轻松查看和操作K8S集群中的资源，支持多集群管理、监控和日志查看等功能。

Kubernetic：
作为一款面向开发人员和运维人员的K8S可视化工具，Kubernetic提供了强大的功能和直观的用户界面，帮助你更好地管理和操作K8S集群，支持实时监控、事件触发、日志查看等功能。

Loodse Kubermatic：
作为一款开源的K8S管理平台，Loodse Kubermatic提供了可视化界面，帮助你管理多个K8S集群，具备应用程序部署、自动扩展、监控和日志查看等功能。

Portainer：
作为一款开源的容器管理工具，Portainer提供了可视化界面，支持管理Docker和K8S集群，实现应用程序部署、资源监控和日志查看等功能。

Kubevious：
作为一款开源的K8S可视化工具，Kubevious提供了直观的界面，帮助你查看和管理K8S集群中的资源，支持拓扑图展示、配置审计和资源关系分析等功能。

Kuboard：
作为一款开源的K8S可视化仪表板，Kuboard提供了用户友好的界面，帮助你监控和管理K8S集群，支持资源概览、事件查看和日志管理等功能。

Grafana：
虽然主要是一款监控和可视化工具，Grafana也可以与K8S集成，提供对集群的可视化展示。通过Grafana的仪表盘功能，你可以创建和定制自己的K8S集群监控视图。

Weave Scope：
作为一款开源的容器和微服务可视化工具，Weave Scope提供了直观的界面，帮助你查看和管理K8S集群中的资源，支持拓扑图展示、性能监控和流量分析等功能。

# Copyright 2017 The Kubernetes Authors.
# https://8grams.medium.com/kubernetes-dashboard-web-based-ui-to-manage-kubernetes-cluster-85f140077c14
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

apiVersion: v1
kind: Namespace
metadata:
  name: kubernetes-dashboard

---

apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard

---

kind: Service
apiVersion: v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
spec:
  type: NodePort
  ports:
    - port: 443
      targetPort: 8443
  selector:
    k8s-app: kubernetes-dashboard

---

apiVersion: v1
kind: Secret
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard-certs
  namespace: kubernetes-dashboard
type: Opaque

---

apiVersion: v1
kind: Secret
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard-csrf
  namespace: kubernetes-dashboard
type: Opaque
data:
  csrf: ""

---

apiVersion: v1
kind: Secret
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard-key-holder
  namespace: kubernetes-dashboard
type: Opaque

---

kind: ConfigMap
apiVersion: v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard-settings
  namespace: kubernetes-dashboard

---

kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
rules:
  # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
  - apiGroups: [""]
    resources: ["secrets"]
    resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
    verbs: ["get", "update", "delete"]
    # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
  - apiGroups: [""]
    resources: ["configmaps"]
    resourceNames: ["kubernetes-dashboard-settings"]
    verbs: ["get", "update"]
    # Allow Dashboard to get metrics.
  - apiGroups: [""]
    resources: ["services"]
    resourceNames: ["heapster", "dashboard-metrics-scraper"]
    verbs: ["proxy"]
  - apiGroups: [""]
    resources: ["services/proxy"]
    resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
    verbs: ["get"]

---

kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
rules:
  # Allow Metrics Scraper to get metrics from the Metrics server
  - apiGroups: ["metrics.k8s.io"]
    resources: ["pods", "nodes"]
    verbs: ["get", "list", "watch"]

---

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: kubernetes-dashboard
subjects:
  - kind: ServiceAccount
    name: kubernetes-dashboard
    namespace: kubernetes-dashboard

---

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: kubernetes-dashboard
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: kubernetes-dashboard
subjects:
  - kind: ServiceAccount
    name: kubernetes-dashboard
    namespace: kubernetes-dashboard

---

kind: Deployment
apiVersion: apps/v1
metadata:
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard
spec:
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      k8s-app: kubernetes-dashboard
  template:
    metadata:
      labels:
        k8s-app: kubernetes-dashboard
    spec:
      securityContext:
        seccompProfile:
          type: RuntimeDefault
      containers:
        - name: kubernetes-dashboard
          image: registry.cn-hangzhou.aliyuncs.com/sj-bioinfo/dashboard:v2.7.0
          imagePullPolicy: Always
          ports:
            - containerPort: 8443
              protocol: TCP
          args:
            - --auto-generate-certificates
            - --namespace=kubernetes-dashboard
            # Uncomment the following line to manually specify Kubernetes API server Host
            # If not specified, Dashboard will attempt to auto discover the API server and connect
            # to it. Uncomment only if the default does not work.
            # - --apiserver-host=http://my-address:port
          volumeMounts:
            - name: kubernetes-dashboard-certs
              mountPath: /certs
              # Create on-disk volume to store exec logs
            - mountPath: /tmp
              name: tmp-volume
          livenessProbe:
            httpGet:
              scheme: HTTPS
              path: /
              port: 8443
            initialDelaySeconds: 30
            timeoutSeconds: 30
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: true
            runAsUser: 1001
            runAsGroup: 2001
      volumes:
        - name: kubernetes-dashboard-certs
          secret:
            secretName: kubernetes-dashboard-certs
        - name: tmp-volume
          emptyDir: {}
      serviceAccountName: kubernetes-dashboard
      nodeSelector:
        "kubernetes.io/os": linux
      # Comment the following tolerations if Dashboard must not be deployed on master
      tolerations:
        - key: node-role.kubernetes.io/master
          effect: NoSchedule

---

kind: Service
apiVersion: v1
metadata:
  labels:
    k8s-app: dashboard-metrics-scraper
  name: dashboard-metrics-scraper
  namespace: kubernetes-dashboard
spec:
  ports:
    - port: 8000
      targetPort: 8000
  selector:
    k8s-app: dashboard-metrics-scraper

---

kind: Deployment
apiVersion: apps/v1
metadata:
  labels:
    k8s-app: dashboard-metrics-scraper
  name: dashboard-metrics-scraper
  namespace: kubernetes-dashboard
spec:
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      k8s-app: dashboard-metrics-scraper
  template:
    metadata:
      labels:
        k8s-app: dashboard-metrics-scraper
    spec:
      securityContext:
        seccompProfile:
          type: RuntimeDefault
      containers:
        - name: dashboard-metrics-scraper
          image: registry.cn-hangzhou.aliyuncs.com/sj-bioinfo/metrics-scraper:v1.0.8
          ports:
            - containerPort: 8000
              protocol: TCP
          livenessProbe:
            httpGet:
              scheme: HTTP
              path: /
              port: 8000
            initialDelaySeconds: 30
            timeoutSeconds: 30
          volumeMounts:
          - mountPath: /tmp
            name: tmp-volume
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: true
            runAsUser: 1001
            runAsGroup: 2001
      serviceAccountName: kubernetes-dashboard
      nodeSelector:
        "kubernetes.io/os": linux
      # Comment the following tolerations if Dashboard must not be deployed on master
      tolerations:
        - key: node-role.kubernetes.io/master
          effect: NoSchedule
      volumes:
        - name: tmp-volume
          emptyDir: {}

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kubernetes-dashboard

---
apiVersion: v1
kind: Secret
metadata:
  name: admin-user-secret
  annotations:
    kubernetes.io/service-account.name: admin-user
type: kubernetes.io/service-account-token


# kubectl -n kubernetes-dashboard apply -f admin-role.yaml

containerd配置国内镜像源及使用私有镜像仓库使用 Java 操作 Kubernetes API