#修改node节点上的bootstrap.kubeconfig,kubelet.kubeconfig配置文件为VIP
 cd /opt/kubernetes/cfg/
 vim bootstrap.kubeconfig 
 server: https://192.168.41.100:6443
 vim kubelet.kubeconfig
 server: https://192.168.41.100:6443
 vim kube-proxy.kubeconfig
 server: https://192.168.41.100:6443
 #重启kubelet和kube-proxy服务
 systemctl restart kubelet.service 
 systemctl restart kube-proxy.service
 #在lb01查看nginx的k8s日志
 tail /var/log/nginx/k8s-access.log
 #在 lb01 上查看 nginx 和 node 、 master 节点的连接状态
 netstat -natp | grep nginx
 tcp        0      0 0.0.0.0:6443            0.0.0.0:*               LISTEN         102055/nginx: maste
 tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN         102055/nginx: maste
 tcp        0      0 192.168.41.44:41768     192.168.41.10:6443      ESTABLISHED    102059/nginx: worke
 tcp        0      0 192.168.41.44:41756     192.168.41.10:6443      ESTABLISHED    102059/nginx: worke
 tcp        0      0 192.168.41.100:6443     192.168.41.43:45278     ESTABLISHED    102058/nginx: worke
 tcp        0      0 192.168.41.100:6443     192.168.41.43:45266     ESTABLISHED    102059/nginx: worke
 tcp        0      0 192.168.41.100:6443     192.168.41.42:54798     ESTABLISHED    102058/nginx: worke
复制代码

#测试创建pod
 kubectl run nginx --image=nginx
 #查看Pod的状态信息
 kubectl get pods
 NAME       READY   STATUS              RESTARTS   AGE
 dns-test   1/1     Running             1          7h48m
 nginx      0/1     ContainerCreating   0          6s   
 #ContainerCreating，表示正在创建中
 kubectl get pods
 NAME       READY   STATUS    RESTARTS   AGE
 dns-test   1/1     Running   1          7h49m
 nginx      1/1     Running   0          88s         
 #Running，表示创建完成，运行中
 kubectl get pods -o wide   #-o wide：输出额外信息。对于Pod，将输出Pod所在的Node名
 NAME       READY   STATUS    RESTARTS   AGE     IP               NODE            NOMINATED NODE   READINESS GATES
 nginx      1/1     Running   0          6m6s    10.244.196.130   192.168.41.43   <none>           <none>
 #READY为1/1，表示这个Pod中有1个容器
 #在对应的node节点上操作，可以直接使用浏览器或者curl命令访问nginx服务
 curl 10.244.196.130    #访问Pod的IP地址
 #这时在master01节点上查看nginx日志，发现没有权限查看
 kubectl logs nginx   #并没有Pod的访问记录
复制代码

#在 master01 节点上操作
 #上传 recommended.yaml 文件到 /opt/k8s 目录中
 cd /opt/k8s
 vim recommended.yaml
 #默认Dashboard只能集群内部访问，修改Service为NodePort类型，暴露到外部
 kind: Service
 apiVersion: v1
 metadata:
   labels:
     k8s-app: kubernetes-dashboard
   name: kubernetes-dashboard
   namespace: kubernetes-dashboard
 spec:
   ports:
     - port: 443
       targetPort: 8443
       nodePort: 30001     #添加
   type: NodePort          #添加
   selector:
     k8s-app: kubernetes-dashboard
 #通过recommended.yaml资源配置清单，使用kubectl apply创建资源，-f指定资源配置清单文件
 kubectl apply -f recommended.yaml
 #创建service account并绑定默认cluster-admin管理员集群角色
 kubectl create serviceaccount dashboard-admin -n kube-system
 kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin
 #获取token值
 kubectl describe secrets -n kube-system $(kubectl -n kube-system get secret | awk '/dashboard-admin/{print $1}')
 #使用输出的token登录Dashboard
 #如果web页面提示不安全，敲thisisunsafe即可进入下一页面，之后将token值输入
 https://192.168.41.43:30001
复制代码