webkubectl - Run kubectl command in Web Browser.

栏目: IT技术 · 发布时间: 4年前

中文 README.md

Web Kubectl - Run kubectl command in web browser

webkubectl - Run kubectl command in Web Browser.

Benefit

Web Kubectl helps you to manage kubernetes credentials and run kubectl command in web browser, so that you don't have to install kubectl on your local PC or some other servers, furthermore Web Kubectl can be used for a team.

Advantage

  • Support multiple user and multiple Kubernetes clusters :One deployment of Web Kubectl can be used for a team, all of the team members can use Web Kubectl simultaneously although they are connecting different Kubernetes clusters or different privileges.
  • Session isolation :All of the online sessions are isolated, each session has its own namespace and storage which is invisible to the others.
  • Support kubeconfig file and bearer token :You can provide kubeconfig file or bearer token to connect Kubernetes cluster through Web Kubectl.
  • Easy to use and integrate :You can simply use the index page for a quick start, or integrate with your application using api.
  • Manage Kubernetes clusters in VPC :Through Web Kubectl you can manage the Kubernetes clusters in VPC which is unreachable from you laptop.
_______________________________________________________________________
|   Local Network     |          DMZ           |      VPC/Datacenter  |
|                     |                        |                      |
|                     |    _______________     |   ----------------   |
|   ---------------   |    |             |  /~~~~~>| Kubernetes A |   |
|   | Your Laptop |~~~~~~~>| Web Kubectl | /   |   ----------------   |
|   ---------------   |    |             | \   |                      |
|                     |    ---------------  \  |   ----------------   |
|                     |                      \~~~~>| Kubernetes B |   |
|                     |                        |   ----------------   |
-----------------------------------------------------------------------

Architecture

Web Kubectl use webkubectl/gotty to run a JavaScript based terminal on web browsers.

When opens a new session, a temporary Linux namespace will be created for the session, this make sure all sessions are isolated, each session has its own namespace and storage, meanwhile .kube/config file is generated for current session.

When session terminated, the provisioned namespace and storage are deleted.

Installation

$ docker run --name="webkubectl" -p 8080:8080 -d --privileged kubeoperator/webkubectl

Advanced environment variables

ENV Type Default Value Description
SESSION_STORAGE_SIZE string 10M Storage size limit for single connection
KUBECTL_INSECURE_SKIP_TLS_VERIFY bool true whether to skip tls verify
GOTTY_OPTIONS string --port 8080 --permit-write --permit-arguments Gotty options, see more
WELCOME_BANNER string Welcome to Web Kubectl, try kubectl --help. Welcome banner after web terminal opened

Usage

Use index page

Open below url in web browser.

http://<webkubectl-address>:<port>

In the opened page you can manage your own kubeconfig files or bearer tokens which are stored in local storage, then choose a session and click connect to use kubectl command in web terminal.

webkubectl - Run kubectl command in Web Browser.

webkubectl - Run kubectl command in Web Browser.

Use API

Get token by Kubernetes API server address and bearer token

$ curl http://<webkubectl-address>:<port>/api/kube-token -X POST -d '{"name":"gks-hk-dev","apiServer":"https://k8s-cluster:6443","token":"token-content"}'
#response
$ {"success":true,"token":"mkolj4hgbutfgy1thgp1","message":""}

Request Json

key Type Description
name string session name
apiServer string API server address
token string Kubernetes bearer token

Response Json

key Type Description
success bool the request is proceeded successfully or not
token string token used to open terminal
message string error message if success is false

Get token by kubeconfig file

$ curl http://<webkubectl-address>:<port>/api/kube-config -X POST -d '{"name":"k8s-cluster-bj1","kubeConfig":"<kubeconfig file content base64 encoded>"}'
#response
$ {"success":true,"token":"mkolj4hgbutfgy1thgp1","message":""}

Request Json

key Type Description
name string session name
kubeConfig string kubeconfig file content base64 encoded

Response Json

key Type Description
success bool the request is proceeded successfully or not
token string token used to open terminal
message string error message if success is false

Open web terminal with token fetched from API

http://<webkubectl-address>:<port>/terminal/?token=<token fetched from api>

Security

  • Token validation :The token fetched from api will be invalid immediately after it's used once, and it expires after 5 minutes if not used.
  • Authentication :By default all resources can be accessed without any authentication, to restrict anonymous access, you can enable the basic authentication of gotty, see how to .
  • SSL/TLS :By default all traffic between the server and clients are NOT encrypted, we recommend you enable SSL/TLS option of gotty, see how to . Alternatively you can deploy Web Kubectl behind a proxy and enable SSL/TLS for the proxy, please note that the proxy should support WebSocket protocol.

Extensions

Dependencies

License

Copyright (c) 2014-2019 FIT2CLOUD 飞致云

https://www.fit2cloud.com

Web Kubectl is licensed under the Apache License, Version 2.0.

Alternatives

Advertisement

KubeOperator

KubeOperator is an open source project, a web based application enable you to deploy and manage production ready Kubernetes clusters on VMware, Openstack, virtual machines and physical machines in LAN network without internet connectivity.

https://kubeoperator.io

https://github.com/kubeoperator/kubeoperator

以上就是本文的全部内容,希望对大家的学习有所帮助,也希望大家多多支持 码农网

查看所有标签

猜你喜欢:

本站部分资源来源于网络,本站转载出于传递更多信息之目的,版权归原作者或者来源机构所有,如转载稿涉及版权问题,请联系我们

深入理解计算机系统(英文版·第2版)

深入理解计算机系统(英文版·第2版)

[美] Randal E. Bryant、[美] David R. O'Hallaron / 机械工业出版社 / 2011-1 / 128.00元

本书是一本将计算机软件和硬件理论结合讲述的经典教程,内容覆盖计算机导论、体系结构和处理器设计等多门课程。本书的最大优点是为程序员描述计算机系统的实现细节,通过描述程序是如何映射到系统上,以及程序是如何执行的,使读者更好地理解程序的行为为什么是这样的,以及造成效率低下的原因。 相对于第1版,本版主要是反映了过去十年间硬件技术和编译器的变化,具体更新如下: 1. 对系统的介绍(特别是实际使......一起来看看 《深入理解计算机系统(英文版·第2版)》 这本书的介绍吧!

正则表达式在线测试
正则表达式在线测试

正则表达式在线测试

HEX HSV 转换工具
HEX HSV 转换工具

HEX HSV 互换工具