无需kubectl代理即可访问Kubernetes仪表板

Question

If I move a relevant config file and run kubectl proxy it will allow me to access the Kubernetes dashboard through this URL:

http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/

However if I try to access the node directly, without kubectl proxy , I will get a 403 Forbidden.

http://dev-master:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#!/login

Our kubernetes clusters are hidden inside a private network that users need to VPN in to; furthermore only some of us can talk to the master node of each of our clusters after authenticating to the VPN. As such, running kubectl proxy is a redundant step, and choosing the appropriate config file for each cluster is an additional pain, especially when we want to compare the state of different clusters.

What needs to be changed to allow "anonymous" HTTP access to the dashboard of these already-secured kubernetes master nodes?

Answer 1

您可能希望为仪表板窗格设置服务（NodePort或LoadBalancer），以将其暴露给外界（好在群集的PoV之外，而PoV仍然是您的内部网络）。