由于主机的本地主机是虚拟机，因此无法从hhtp url登录kubernetes仪表板

Question

我需要使用kubectl代理从仪表板创建一个https URL仅生成http url如何创建一个https
url我们应该为该令牌运行什么命令，但会生成错误信息，但登录信息显示板却保持静态，输入令牌无响应

Answer 1

您可以kubernetes- dashboard通过NodePort公开服务。

为此，最简单的方法是编辑当前kubernetes-dashboard服务配置并将ClusterIP参数更改为NodePort：

kubectl edit services kubernetes-dashboard -n kube-system

apiVersion: v1
kind: Service
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"k8s-app":"kubernetes-dashboard"}
,"name":"kubernetes-dashboard","namespace":"kube-system"},"spec":{"ports":[{"port":443,"targetPort":8443}],"select
or":{"k8s-app":"kubernetes-dashboard"}}}
  creationTimestamp: null
  labels:
    k8s-app: kubernetes-dashboard
  name: kubernetes-dashboard
  selfLink: /api/v1/namespaces/kube-system/services/kubernetes-dashboard
spec:
  externalTrafficPolicy: Cluster
  ports:
  - port: 443
    protocol: TCP
    targetPort: 8443
  selector:
    k8s-app: kubernetes-dashboard
  sessionAffinity: None
  type: NodePort
status:
  loadBalancer: {}

然后Kubernetes从范围（30000-32767）分配一些端口，每个节点应将该端口代理到您的目标服务。

现在kubernetes-dashboard，您可以检查并查找端口参考：

kubectl describe svc kubernetes-dashboard -n kube-system

Name:                     kubernetes-dashboard
Namespace:                kube-system
Labels:                   k8s-app=kubernetes-dashboard
Annotations:              kubectl.kubernetes.io/last-applied-configuration={"apiVersion":"v1","kind":"Service","me
tadata":{"annotations":{},"labels":{"k8s-app":"kubernetes-dashboard"},"name":"kubernetes-dashboard","namespace":..
.
Selector:                 k8s-app=kubernetes-dashboard
Type:                     NodePort
IP:                       XX.XX.XX.XX
Port:                     <unset>  443/TCP
TargetPort:               8443/TCP
NodePort:                 <unset>  31605/TCP
Endpoints:                XX.XX.XX.XX:8443
Session Affinity:         None
External Traffic Policy:  Cluster
Events:                   <none>

最后，您可以检查是否kubernetes-dashboard可以访问：

curl -k https://localhost:31605

如果您考虑通过某种方式与Kubernetes仪表板进行对话，请Bearer token查看此指南。