做软件工资高还是网站,惠东网络建站公司,做转发赚钱的网站,重庆节点建筑设计咨询有限公司整体思路 用户访问一个页面#xff0c;在该页面中设置一个超链接#xff0c;点击跳转至K8S Dashboard#xff1b;跳转后#xff0c;使用剪贴板上已复制的Token粘贴到Dashboard页面中的输入框登录即可。 写个定时任务将Token复制到页面上#xff0c;过期了重新再登…整体思路 用户访问一个页面在该页面中设置一个超链接点击跳转至K8S Dashboard跳转后使用剪贴板上已复制的Token粘贴到Dashboard页面中的输入框登录即可。 写个定时任务将Token复制到页面上过期了重新再登录 如果要对这个页面做权限控制可考虑借助nginx。 使用nodejs搭建一个web容器用于展示该跳转页面 参考https://www.jianshu.com/p/15971d243186 创建server.js定义一个Web服务
vi server.jsvar url require(url),fs require(fs),http require(http),path require(path);
http.createServer(function (req, res) {var pathname __dirname url.parse(/distreq.url).pathname;//资源指向dist目录if (path.extname(pathname) ) {pathname /;}if (pathname.charAt(pathname.length - 1) /) {pathname index.html;}fs.exists(pathname, function (exists) {if (exists) {switch(path.extname(pathname)){case .html:res.writeHead(200, {Content-Type: text/html});break;default:res.writeHead(200, {Content-Type: application/octet-stream});}fs.readFile(pathname, function (err, data) {res.end(data);});} else {res.writeHead(404, {Content-Type: text/html});res.end(h1404 Not Found/h1);}});
}).listen(3003);
console.log(监听3003端口);创建Dockerfile
vi Dockerfile# Pull base image
FROM docker.io/node:latest# Expose ports.
EXPOSE 3003# Usage: USER [UID]
USER root# Usage: WORKDIR /path
WORKDIR /http-server# add js
ADD server.js /http-server/RUN mkdir dist# modify conf
ENTRYPOINT [node,/http-server/server.js]创建镜像并推送致仓库 - docker build -t yourharboraddr/lib/dashboard-token:v0.0.1 . - docker push yourharboraddr/lib/dashboard-token:v0.0.1 定义Deployment和SVC部署到kubernetes-dashboard空间避免其它用户骚操作 vi deployment-token.yamlapiVersion: apps/v1
kind: Deployment
metadata:labels:app: dashboard-tokenname: dashboard-token-developernamespace: kubernetes-dashboard
spec:replicas: 1selector:matchLabels:app: dashboard-tokentemplate:metadata:labels:app: dashboard-tokenspec:containers:- image: yourharboraddr/lib/dashboard-token:v0.0.1imagePullPolicy: IfNotPresentname: dashboard-token-containersports:- containerPort: 3003protocol: TCP
---
apiVersion: v1
kind: Service
metadata:labels:app: dashboard-tokenname: dashboard-token-developer-svcnamespace: kubernetes-dashboard
spec:ports:- port: 3003protocol: TCPtargetPort: 3003nodePort: 3xxxxselector:app: dashboard-tokentype: NodePort
部署 kubectl apply -f deployment-token.yaml
定义一个用于展示跳转按钮的页面模板 自动复制token后跳转至Dashboardhref直接在URL中选择了develop命名空间该用户没有授权查看命名空间的权限只能在界面上选择default命名空间但可以直接用URL中的命名空间跳转至有权限的命名空间develop vi index.html.templete!DOCTYPE html
html
head
meta charsetutf-8
titleGo to K8S Dashboard!/title
/head
bodyinput typetext valuek8stoken idtoken styleopacity: 0 readonly/a titleToken will hidding in your clipboard!!! hrefhttps://yourDashboardIP:yourPort/#/pod?namespacedevelop onclickjavascript:document.getElementById(token).select();document.execCommand(Copy);Go to K8S Dashboard!/a
/body
/html定义一个Shell脚本复制一个index.html
- 获取普通用户的token将token存入index.html - 再将index.html复制到pod中
vi getToken4developer.sh
#! /bin/bashexport POD_NAME$(kubectl get pods --namespace kubernetes-dashboard -l appdashboard-token -o jsonpath{.items[0].metadata.name})
export K8S_DEVELOPER_TOKEN$(kubectl -n develop create token developer)rm -f /root/dashboard/index.html
cp /root/dashboard/index.html.templete /root/dashboard/index.html
#将token添加到index.html中
sed -i s/k8stoken/$K8S_DEVELOPER_TOKEN/g /root/dashboard/index.html
#复制index.html至pod
kubectl cp /root/dashboard/index.html $POD_NAME:/http-server/dist/ --namespace kubernetes-dashboard
定时任务
- Token不是老过期么在linux上写个cronjob定时将新的token复制到index.html中 - crontab -e - 每半个小时或者一个小时什么的更新一下过期前更新一下就行 - */1 * * * bash /root/dashboard/getToken4developer.sh 测试 - 访问该pod的地址http://yourk8sIP:3xxxx 自动打开index.html - 点击Go to K8S Dashboard!按钮跳转至k8s的dashboard中 - 粘贴Token登录即可
