通过浏览器访问API server的时候,会提示没有权限。
kubectl cluster-info
Kubernetes master is running at https://192.168.76.250:6443
CoreDNS is running at https://192.168.76.250:6443/api/v1/namespaces/kube-system/services/coredns:dns/proxy
Heapster is running at https://192.168.76.250:6443/api/v1/namespaces/kube-system/services/heapster/proxy
monitoring-grafana is running at https://192.168.76.250:6443/api/v1/namespaces/kube-system/services/monitoring-grafana/proxy
monitoring-influxdb is running at https://192.168.76.250:6443/api/v1/namespaces/kube-system/services/monitoring-influxdb:http/proxy
浏览器访问https://192.168.76.250:6443/api/v1/namespaces/kube-system/services/monitoring-grafana/proxy
浏览器会提示证书验证,因为通过加密通道,以改方式访问的话,需要提前导入证书到你的计算机中。
导入证书
将生成的admin.pem证书转换格式
openssl pkcs12 -export -in admin.pem -out admin.p12 -inkey admin-key.pem
将生成的
admin.p12
证书导入的你的电脑,导出的时候记住你设置的密码,导入的时候还要用到。 密码:admin
访问API server 验证