上传文件至 'KubeGems'

2023-03-28 20:50:31 +08:00 · 2023-03-28 20:50:31 +08:00 · b81e8f06fd
commit b81e8f06fd
parent 07c9d5d3d8
1 changed files with 773 additions and 0 deletions
--- a/KubeGems/KubeGems连接Kubernetes.md
+++ b/KubeGems/KubeGems连接Kubernetes.md
@ -0,0 +1,773 @@
+<h1><center>KubeGems连接Kubernetes</center></h1>
+
+------
+
+**作者：行癫<盗版必究>**
+
+## 一：Kubernetes集群部署
+
+#### 1.kubernetes环境
+
+		kubernetes高可用集群
+
+		kubernetes非高可用集群
+
+#### 2.kubernetes验证
+
+```shell
+[root@master ~]# kubectl get node
+NAME     STATUS   ROLES                  AGE    VERSION
+master   Ready    control-plane,master   124d   v1.25.1
+node-1   Ready    <none>                 124d   v1.25.1
+node-2   Ready    <none>                 124d   v1.25.1
+node-3   Ready    <none>                 124d   v1.25.1
+```
+
+## 二：KubeGems部署
+
+		KubeGems部署需要基于Kubernetes集群的环境，高可用集群和非高可用集群均可，在这里基于非高可用集群部署
+
+		kubernetes 1.20 及以上版本( 1.23+最佳 )
+
+#### 1.核心组件
+
+|         名称         |                            描述                             |
+| :------------------: | :---------------------------------------------------------: |
+| `kubegems-installer` |       kubegems 安装程序，安装 kubegems 组件及依赖组件       |
+|      `kubegems`      |       kubegems 核心组件，包含 UI 界面及相关 API 服务        |
+|   `kubegems-local`   | kubegems 边缘组件，安装在托管集群上，获取集群信息和执行操作 |
+
+#### 2.部署kubegems-installer
+
+		installer 是用于安装 kubegems 主要组件和插件的控制器
+
+```shell
+[root@master ~]# kubectl create namespace kubegems-installer
+[root@master ~]# kubectl apply -f https://github.com/kubegems/kubegems/raw/main/deploy/installer.yaml
+[root@master ~]# vi installer.yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.0
+    meta.helm.sh/release-name: kubegems-installer
+    meta.helm.sh/release-namespace: kubegems-installer
+  creationTimestamp: null
+  name: plugins.plugins.kubegems.io
+spec:
+  group: plugins.kubegems.io
+  names:
+    kind: Plugin
+    listKind: PluginList
+    plural: plugins
+    singular: plugin
+  scope: Namespaced
+  versions:
+  - additionalPrinterColumns:
+    - description: Kind of the bundle
+      jsonPath: .spec.kind
+      name: Kind
+      type: string
+    - description: Status of the bundle
+      jsonPath: .status.phase
+      name: Status
+      type: string
+    - description: Install Namespace of the bundle
+      jsonPath: .status.namespace
+      name: Namespace
+      type: string
+    - description: Version of the bundle
+      jsonPath: .status.version
+      name: Version
+      type: string
+    - description: app version of the bundle
+      jsonPath: .status.appVersion
+      name: AppVersion
+      type: string
+    - description: UpgradeTimestamp of the bundle
+      jsonPath: .status.upgradeTimestamp
+      name: UpgradeTimestamp
+      type: date
+    - description: CreationTimestamp of the bundle
+      jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1beta1
+    schema:
+      openAPIV3Schema:
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            properties:
+              chart:
+                description: Chart is the name of the chart to install.
+                type: string
+              dependencies:
+                description: Dependencies is a list of bundles that this bundle depends
+                  on. The bundle will be installed after all dependencies are exists.
+                items:
+                  description: 'ObjectReference contains enough information to let
+                    you inspect or modify the referred object. --- New uses of this
+                    type are discouraged because of difficulty describing its usage
+                    when embedded in APIs. 1. Ignored fields.  It includes many fields
+                    which are not generally honored.  For instance, ResourceVersion
+                    and FieldPath are both very rarely valid in actual usage. 2. Invalid
+                    usage help.  It is impossible to add specific help for individual
+                    usage.  In most embedded usages, there are particular restrictions
+                    like, "must refer only to types A and B" or "UID not honored"
+                    or "name must be restricted". Those cannot be well described when
+                    embedded. 3. Inconsistent validation.  Because the usages are
+                    different, the validation rules are different by usage, which
+                    makes it hard for users to predict what will happen. 4. The fields
+                    are both imprecise and overly precise.  Kind is not a precise
+                    mapping to a URL. This can produce ambiguity during interpretation
+                    and require a REST mapping.  In most cases, the dependency is
+                    on the group,resource tuple and the version of the actual struct
+                    is irrelevant. 5. We cannot easily change it.  Because this type
+                    is embedded in many locations, updates to this type will affect
+                    numerous schemas.  Don''t make new APIs embed an underspecified
+                    API type they do not control. Instead of using this type, create
+                    a locally provided and used type that is well-focused on your
+                    reference. For example, ServiceReferences for admission registration:
+                    https://github.com/kubernetes/api/blob/release-1.17/admissionregistration/v1/types.go#L533
+                    .'
+                  properties:
+                    apiVersion:
+                      description: API version of the referent.
+                      type: string
+                    fieldPath:
+                      description: 'If referring to a piece of an object instead of
+                        an entire object, this string should contain a valid JSON/Go
+                        field access statement, such as desiredState.manifest.containers[2].
+                        For example, if the object reference is to a container within
+                        a pod, this would take on a value like: "spec.containers{name}"
+                        (where "name" refers to the name of the container that triggered
+                        the event) or if no container name is specified "spec.containers[2]"
+                        (container with index 2 in this pod). This syntax is chosen
+                        only to have some well-defined way of referencing a part of
+                        an object. TODO: this design is not final and this field is
+                        subject to change in the future.'
+                      type: string
+                    kind:
+                      description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+                      type: string
+                    name:
+                      description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+                      type: string
+                    namespace:
+                      description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+                      type: string
+                    resourceVersion:
+                      description: 'Specific resourceVersion to which this reference
+                        is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+                      type: string
+                    uid:
+                      description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+                      type: string
+                  type: object
+                type: array
+              disabled:
+                description: Disabled indicates that the bundle should not be installed.
+                type: boolean
+              installNamespace:
+                description: InstallNamespace is the namespace to install the bundle
+                  into. If not specified, the bundle will be installed into the namespace
+                  of the bundle.
+                type: string
+              kind:
+                description: Kind bundle kind.
+                enum:
+                - helm
+                - kustomize
+                - template
+                type: string
+              path:
+                description: Path is the path in a tarball to the chart/kustomize.
+                type: string
+              url:
+                description: URL is the URL of helm repository, git clone url, tarball
+                  url, s3 url, etc.
+                type: string
+              values:
+                description: Values is a nested map of helm values.
+                type: object
+                x-kubernetes-preserve-unknown-fields: true
+              valuesFrom:
+                description: ValuesFiles is a list of references to helm values files.
+                  Ref can be a configmap or secret.
+                items:
+                  properties:
+                    kind:
+                      description: Kind is the type of resource being referenced
+                      enum:
+                      - ConfigMap
+                      - Secret
+                      type: string
+                    name:
+                      description: Name is the name of resource being referenced
+                      type: string
+                    optional:
+                      description: Optional set to true to ignore referense not found
+                        error
+                      type: boolean
+                    prefix:
+                      description: An optional identifier to prepend to each key in
+                        the ConfigMap. Must be a C_IDENTIFIER.
+                      type: string
+                  required:
+                  - kind
+                  - name
+                  type: object
+                type: array
+              version:
+                description: Version is the version of helm chart, git revision, etc.
+                type: string
+            type: object
+          status:
+            properties:
+              appVersion:
+                description: AppVersion is the app version of the bundle.
+                type: string
+              creationTimestamp:
+                description: CreationTimestamp is the first creation timestamp of
+                  the bundle.
+                format: date-time
+                type: string
+              message:
+                description: Message is the message associated with the status In
+                  helm, it's the notes contens.
+                type: string
+              namespace:
+                description: Namespace is the namespace where the bundle is installed.
+                type: string
+              phase:
+                description: Phase is the current state of the release
+                type: string
+              resources:
+                description: Resources is a list of resources created/managed by the
+                  bundle.
+                items:
+                  description: 'ObjectReference contains enough information to let
+                    you inspect or modify the referred object. --- New uses of this
+                    type are discouraged because of difficulty describing its usage
+                    when embedded in APIs. 1. Ignored fields.  It includes many fields
+                    which are not generally honored.  For instance, ResourceVersion
+                    and FieldPath are both very rarely valid in actual usage. 2. Invalid
+                    usage help.  It is impossible to add specific help for individual
+                    usage.  In most embedded usages, there are particular restrictions
+                    like, "must refer only to types A and B" or "UID not honored"
+                    or "name must be restricted". Those cannot be well described when
+                    embedded. 3. Inconsistent validation.  Because the usages are
+                    different, the validation rules are different by usage, which
+                    makes it hard for users to predict what will happen. 4. The fields
+                    are both imprecise and overly precise.  Kind is not a precise
+                    mapping to a URL. This can produce ambiguity during interpretation
+                    and require a REST mapping.  In most cases, the dependency is
+                    on the group,resource tuple and the version of the actual struct
+                    is irrelevant. 5. We cannot easily change it.  Because this type
+                    is embedded in many locations, updates to this type will affect
+                    numerous schemas.  Don''t make new APIs embed an underspecified
+                    API type they do not control. Instead of using this type, create
+                    a locally provided and used type that is well-focused on your
+                    reference. For example, ServiceReferences for admission registration:
+                    https://github.com/kubernetes/api/blob/release-1.17/admissionregistration/v1/types.go#L533
+                    .'
+                  properties:
+                    apiVersion:
+                      description: API version of the referent.
+                      type: string
+                    fieldPath:
+                      description: 'If referring to a piece of an object instead of
+                        an entire object, this string should contain a valid JSON/Go
+                        field access statement, such as desiredState.manifest.containers[2].
+                        For example, if the object reference is to a container within
+                        a pod, this would take on a value like: "spec.containers{name}"
+                        (where "name" refers to the name of the container that triggered
+                        the event) or if no container name is specified "spec.containers[2]"
+                        (container with index 2 in this pod). This syntax is chosen
+                        only to have some well-defined way of referencing a part of
+                        an object. TODO: this design is not final and this field is
+                        subject to change in the future.'
+                      type: string
+                    kind:
+                      description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+                      type: string
+                    name:
+                      description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+                      type: string
+                    namespace:
+                      description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+                      type: string
+                    resourceVersion:
+                      description: 'Specific resourceVersion to which this reference
+                        is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+                      type: string
+                    uid:
+                      description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+                      type: string
+                  type: object
+                type: array
+              upgradeTimestamp:
+                description: UpgradeTimestamp is the time when the bundle was last
+                  upgraded.
+                format: date-time
+                type: string
+              values:
+                description: Values is a nested map of final helm values.
+                type: object
+                x-kubernetes-preserve-unknown-fields: true
+              version:
+                description: Version is the version of the bundle. In helm, Version
+                  is the version of the chart.
+                type: string
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  annotations:
+    meta.helm.sh/release-name: kubegems-installer
+    meta.helm.sh/release-namespace: kubegems-installer
+  labels:
+    app.kubernetes.io/component: installer
+    app.kubernetes.io/instance: kubegems-installer
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kubegems-installer
+    helm.sh/chart: kubegems-installer-1.21.0
+  name: kubegems-installer
+  namespace: kubegems-installer
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  annotations:
+    meta.helm.sh/release-name: kubegems-installer
+    meta.helm.sh/release-namespace: kubegems-installer
+  labels:
+    app.kubernetes.io/component: installer
+    app.kubernetes.io/instance: kubegems-installer
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kubegems-installer
+    helm.sh/chart: kubegems-installer-1.21.0
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+    rbac.authorization.k8s.io/aggregate-to-view: "true"
+  name: kubegems-installer-view
+rules:
+- apiGroups:
+  - plugins.kubegems.io
+  resources:
+  - plugins
+  verbs:
+  - get
+  - list
+  - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  annotations:
+    meta.helm.sh/release-name: kubegems-installer
+    meta.helm.sh/release-namespace: kubegems-installer
+  labels:
+    app.kubernetes.io/component: installer
+    app.kubernetes.io/instance: kubegems-installer
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kubegems-installer
+    helm.sh/chart: kubegems-installer-1.21.0
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+  name: kubegems-installer-edit
+rules:
+- apiGroups:
+  - plugins.kubegems.io
+  resources:
+  - plugins
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  annotations:
+    meta.helm.sh/release-name: kubegems-installer
+    meta.helm.sh/release-namespace: kubegems-installer
+  labels:
+    app.kubernetes.io/component: installer
+    app.kubernetes.io/instance: kubegems-installer
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kubegems-installer
+    helm.sh/chart: kubegems-installer-1.21.0
+  name: kubegems-installer
+  namespace: kubegems-installer
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: kubegems-installer
+  namespace: kubegems-installer
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    meta.helm.sh/release-name: kubegems-installer
+    meta.helm.sh/release-namespace: kubegems-installer
+  labels:
+    app.kubernetes.io/component: installer
+    app.kubernetes.io/instance: kubegems-installer
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kubegems-installer
+    helm.sh/chart: kubegems-installer-1.21.0
+  name: kubegems-installer
+  namespace: kubegems-installer
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: installer
+      app.kubernetes.io/instance: kubegems-installer
+      app.kubernetes.io/name: kubegems-installer
+  strategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: installer
+        app.kubernetes.io/instance: kubegems-installer
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: kubegems-installer
+        helm.sh/chart: kubegems-installer-1.21.0
+    spec:
+      containers:
+      - args:
+        - installer
+        - --enableleaderelection
+        - --probeaddr=:8080
+        - --metricsaddr=:9100
+        env:
+        - name: LOG_LEVEL
+          value: debug
+        image: docker.io/kubegems/kubegems:latest
+        imagePullPolicy: IfNotPresent
+        livenessProbe:
+          failureThreshold: 6
+          httpGet:
+            path: /healthz
+            port: probe
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        name: installer
+        ports:
+        - containerPort: 8080
+          name: probe
+          protocol: TCP
+        - containerPort: 9100
+          name: metrics
+          protocol: TCP
+        readinessProbe:
+          failureThreshold: 6
+          httpGet:
+            path: /healthz
+            port: probe
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        resources:
+          limits: {}
+          requests: {}
+      serviceAccountName: kubegems-installer
+```
+
+		验证
+
+```shell
+[root@master ~]# kubectl -n kubegems-installer get po
+NAME                                  READY   STATUS    RESTARTS   AGE
+kubegems-installer-757d4c64db-cf2x2   1/1     Running   0          20m
+```
+
+#### 2.安装local-path-provisioner
+
+		kubegems 需要持久化一些重要数据，安装local-path-provisioner
+
+```shell
+[root@master ~]# kubectl create namespace local-path-storage
+[root@master ~]# kubectl apply -f https://raw.githubusercontent.com/kubegems/kubegems/main/deploy/addon-local-path-provisioner.yaml
+[root@master kubegems]# vi addon-local-path-provisioner.yaml
+# https://github.com/rancher/local-path-provisioner/tree/master/deploy/chart
+apiVersion: plugins.kubegems.io/v1beta1
+kind: Plugin
+metadata:
+  name: local-path-provisioner
+  namespace: local-path-storage
+spec:
+  kind: helm
+  url: https://github.com/rancher/local-path-provisioner/archive/refs/tags/v0.0.22.tar.gz
+  path: local-path-provisioner-0.0.22/deploy/chart/local-path-provisioner
+  version: 0.0.22
+  values:
+    storageClass:
+      defaultClass: true
+      provisionerName: rancher.io/local-path
+    nodePathMap:
+      - node: DEFAULT_PATH_FOR_NON_LISTED_NODES
+        paths:
+          - /data
+```
+
+#### 3.部署 kubegems
+
+```shell
+[root@master ~]# kubectl create namespace kubegems
+[root@master ~]# export STORAGE_CLASS=local-path  # 改为您使用的 storageClass
+[root@master ~]# export KUBEGEMS_VERSION=v1.21.1  # change to specify kubegems version
+[root@master ~]# wget https://raw.githubusercontent.com/kubegems/kubegems/main/deploy/kubegems-mirror.yaml
+apiVersion: plugins.kubegems.io/v1beta1
+kind: Plugin
+metadata:
+  name: kubegems
+  namespace: kubegems
+spec:
+  kind: helm
+  url: https://charts.kubegems.io/kubegems
+  values:
+    global:
+      imageRegistry: registry.cn-beijing.aliyuncs.com
+      kubegemsVersion: latest
+      storageClass: local-path # change me to use a production storage class
+    mysql:
+      image:
+        repository: kubegems/mysql
+        persistence:
+          enabled: true
+          size: 20Gi
+    redis:
+      image:
+        repository: kubegems/redis
+      master:
+        persistence:
+          enabled: true
+          size: 5Gi
+      volumePermissions:
+        enabled: true
+        image:
+          repository: kubegems/bitnami-shell
+    argo-cd:
+      image:
+        repository: kubegems/argo-cd
+      redis:
+        image:
+          repository: kubegems/redis
+    gitea:
+      image:
+        repository: kubegems/gitea
+      persistence:
+        enabled: true
+        size: 10Gi
+    chartmuseum:
+      image:
+        repository: kubegems/chartmuseum
+      persistence:
+        enabled: true
+        size: 5Gi
+    ingress:
+      hostname: dashboard.kubegems.io
+[root@master ~]# sed -i -e "s/local-path/${STORAGE_CLASS}/g" -e "s/latest/${KUBEGEMS_VERSION}/g" kubegems-mirror.yaml
+[root@master ~]# kubectl create -f kubegems-mirror.yaml
+```
+
+		验证
+
+```shell
+[root@master ~]# kubectl -n kubegems get pod
+NAME                                               READY   STATUS      RESTARTS       AGE
+kubegems-api-7856cddc86-zxf2m                      1/1     Running     6 (148m ago)   152m
+kubegems-argo-cd-app-controller-57c756777c-qgtkb   1/1     Running     0              152m
+kubegems-argo-cd-repo-server-84bc9df4cd-cvhmk      1/1     Running     0              152m
+kubegems-argo-cd-server-58d6ccc99-mqb4k            1/1     Running     0              152m
+kubegems-chartmuseum-74d498759c-rl49v              1/1     Running     0              152m
+kubegems-charts-init-v1.21.1-2tn8s                 0/1     Completed   0              152m
+kubegems-dashboard-777875598f-7pfvx                1/1     Running     0              152m
+kubegems-gitea-0                                   1/1     Running     0              152m
+kubegems-init-v1.21.1-gpvrw                        0/1     Completed   5              152m
+kubegems-msgbus-7c6c4c66c-kq8xw                    1/1     Running     6 (148m ago)   152m
+kubegems-mysql-0                                   1/1     Running     0              152m
+kubegems-redis-master-0                            1/1     Running     0              136m
+kubegems-worker-85c8d75ff7-2b7rr                   1/1     Running     6 (148m ago)   152m
+```
+
+#### 4.访问kubegems仪表板
+
+		你需要编辑kubegems插件，为dashbnoard组件开启nodeport：
+
+```shell
+[root@master ~]# kubectl -n kubegems edit plugins.plugins.kubegems.io kubegems
+只添加nodeport
+apiVersion: plugins.kubegems.io/v1beta1
+kind: Plugin
+metadata:
+spec:
+  kind: helm
+  url: https://charts.kubegems.io/kubegems
+  values:
+    dashboard:
+      service:
+        type: NodePort
+    global:
+      kubegemsVersion: v1.21.1
+      storageClass: local-path
+    ingress:
+      hostname: dashboard.kubegems.io
+```
+
+		使用 ingress 或其他方式访问
+
+注意：
+
+		kubegems 默认创建了 hostname 为 `dashboard.kubegems.io` 的 ingress, 同时默认绑定了 `default-gateway`的`ingressClass`。 如果您想更改为其他域名，或者绑定到其他网关可以编辑kubegems插件
+
+		`default-gateway`是平台默认网关，要使用它，你需要启用`网关-gateway`插件
+
+```shell
+[root@master ~]# kubectl -n kubegems edit plugins.plugins.kubegems.io kubegems
+apiVersion: plugins.kubegems.io/v1beta1
+kind: Plugin
+metadata:
+spec:
+  kind: helm
+  url: https://charts.kubegems.io/kubegems
+  values:
+    global:
+      kubegemsVersion: v1.21.1
+      storageClass: local-path
+    ingress:
+      hostname: dashboard.kubegems.io
+      ingressClassName: default-gateway
+```
+
+		获取 ingress 访问地址
+
+```shell
+[root@master ~]# PORT=$(kubectl -n kubegems-gateway get svc default-gateway -ojsonpath='{.spec.ports[0].nodePort}')
+[root@master ~]# ADDRESS=$(kubectl -n kubegems get ingress kubegems -ojsonpath='{.spec.rules[*].host}')
+[root@master ~]# echo http://$ADDRESS:$PORT
+```
+
+#### 5.浏览器访问
+
+		用户：admin
+
+		密码：demo!@#admin
+
+```shell
+[root@master ~]# kubectl get svc -n kubegems | grep dashboard
+kubegems-dashboard                NodePort    10.103.140.101   <none>        80:32317/TCP,9100:30420/TCP   173m
+```
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/gems-first-dashbaord-bbc455105192bd6a238ac0b41ed07503.jpg" alt="img" style="zoom:50%;" />
+
+## 三：连接Kubernetes集群
+
+#### 1.获取集群kubeconfig
+
+		获取current-context（clusters.cluster.name）
+
+```shell
+[root@master ~]# CURRENT_CONTEXT=`kubectl config current-context`
+```
+
+		获取current-cluster
+
+```shell
+[root@master ~]# CURRENT_CLUSTER=`kubectl config view --raw -o=go-template='{{range .contexts}}{{if eq .name "'''${CURRENT_CONTEXT}'''"}}{{ index .context "cluster" }}{{end}}{{end}}'`
+```
+
+		获取certificate-authority-data
+
+```shell
+[root@master ~]# certificate-authority-data=`kubectl config view --raw -o=go-template='{{range .clusters}}{{if eq .name "'''${CURRENT_CLUSTER}'''"}}"{{with index .cluster "certificate-authority-data" }}{{.}}{{end}}"{{ end }}{{ end }}')`
+```
+
+		用户：dashboard-admin；获取token
+
+```shell
+[root@master ~]# kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep dashboard-admin | awk '{print $1}'
+```
+
+		kubeconfig文件创建
+
+```shell
+[root@master ~]# cat kubeconfig 
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: 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
+    server: https://10.0.0.220:6443
+  name: kubernetes-admin@kubernetes
+contexts:
+- context:
+    cluster: kubernetes-admin@kubernetes
+    user: dashboard-admin
+  name: kubernetes-admin@kubernetes
+current-context: kubernetes-admin@kubernetes
+kind: Config
+preferences: {}
+users:
+- name: dashboard-admin
+  user:
+    token: eyJhbGciOiJSUzI1NiIsImtpZCI6InFsRE1GQi1KQnZsZHpUOGZ4WGc1dlU1UHg3UGVrcC02TUNyYmZWcHhFZ3MifQ.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.anEX2MBlIo0lKQCGOsl3oZKBQkYujg6twLoO8hbWLAVp3xveAgpt6nW-_FrkG0yy9tIyXa6lpvu-c99ueB4KvKrIF0vJggWT3fU73u75iIwTbqDSghWy_BRFjt9NYuUFL4Mu-sPqra0ELgxYIGSEVuQwmZ8qOFjrQQQ2pKjxt8SsUHGLW-9FgmSgZTHPvZKFnU2V23BC2n_vowff63PF6kfnj1bNzV3Z1YCzgZOdy3jKM6sNKSI3dbcHiJpv5p7XF18qvuSZMJ9tMU4vSwzkQ_OLxsdNYwwD_YfRhua6f0kgWO23Z0lBTRLInejssdIQ31yewg9Eoqv4DhN1jZqhOw
+```
+
+2.KubeGems连接
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235104152.png" alt="image-20220828235104152" style="zoom:50%;" />
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235127957.png" alt="image-20220828235127957" style="zoom:50%;" />
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235208725.png" alt="image-20220828235208725" style="zoom:50%;" />
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235303696.png" alt="image-20220828235303696" style="zoom:50%;" />
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235332423.png" alt="image-20220828235332423" style="zoom:50%;" />
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235402611.png" alt="image-20220828235402611" style="zoom:50%;" />
+
+#### 2.查看kubernetes节点
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235439473.png" alt="image-20220828235439473" style="zoom:50%;" />
+
+#### 3.查看资源概览
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235613811.png" alt="image-20220828235613811" style="zoom:50%;" />
+
+#### 4.组件管理
+
+<img src="https://xingdian-image.oss-cn-beijing.aliyuncs.com/xingdian-image/image-20220828235643825.png" alt="image-20220828235643825" style="zoom:50%;" />