Files
truecharts/charts/premium/kubernetes-dashboard/values.yaml
T
TrueCharts BotandGitHub 1a2067b68e chore(helm): update image docker.io/kubernetesui/dashboard-web 1.5.2 → 1.6.0 (#28659)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/kubernetesui/dashboard-web](https://redirect.github.com/kubernetes/dashboard)
| minor | `2c4f217` -> `67d4304` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>kubernetes/dashboard
(docker.io/kubernetesui/dashboard-web)</summary>

###
[`v1.6.0`](https://redirect.github.com/kubernetes/dashboard/releases/tag/v1.6.0)

#### Breaking change

Due to migration to
[client-go](https://redirect.github.com/kubernetes/client-go) Dashboard
no longer supports in-cluster config without enabled Service Accounts.

You can read more about it in our [troubleshooting
guide](https://redirect.github.com/kubernetes/dashboard/blob/master/docs/user-guide/troubleshooting.md).

#### Changelog

##### Bug Fixes

-   Don't display pods for services without selector
-   Return status 200 instead of 201 while getting resources
-   Fix "unknown creator" display bug
-   Fix status icon for terminated successful pods
-   Use valid error status coming from cluster
-   Fix orphaned pods view bug
-   Fix node events
-   Fix card issue on daemon set and node details view
-   Fix created by list on pod detail page

##### Features

-   Add Storage Classes view
-   Add initial Third Party Resources view
-   Add `bind-address` CLI option
-   Add custom page title for each view
-   Parse URLs in annotations
-   Add events list for Pods view
-   Update Japanese translations
-   Improve project documentation
-   Migrate to Kubernetes `client-go` and refactor backend
-   Update internal error page
-   Cap Dashboard's replica set limit at 10

#### Images

    gcr.io/google_containers/kubernetes-dashboard-arm64:v1.6.0
    gcr.io/google_containers/kubernetes-dashboard-amd64:v1.6.0
    gcr.io/google_containers/kubernetes-dashboard-ppc64le:v1.6.0
    gcr.io/google_containers/kubernetes-dashboard-arm:v1.6.0

#### Installation

```bash
kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.6.0/src/deploy/kubernetes-dashboard.yaml
```

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMzUuMyIsInVwZGF0ZWRJblZlciI6IjM4LjEzNS4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2024-10-31 17:42:58 +01:00

444 lines
11 KiB
YAML

image:
pullPolicy: IfNotPresent
repository: tccr.io/tccr/kube-sa-proxy
tag: latest
webImage:
repository: docker.io/kubernetesui/dashboard-web
pullPolicy: IfNotPresent
tag: 1.6.0@sha256:67d4304dac880fbdda911842c550a64158245a8a3d3b011464e29c9586292205
authImage:
repository: docker.io/kubernetesui/dashboard-auth
pullPolicy: IfNotPresent
tag: 1.2.2@sha256:2d292e8fd82155fe0e5c98cac136fd4ea94d4325169527d465e07318d0de4f51
apiImage:
repository: docker.io/kubernetesui/dashboard-api
pullPolicy: IfNotPresent
tag: 1.10.1@sha256:a73ae2274e47dc5339f69bd97c9d80a299c2ae1b45eef4d1b32390e248980dd5
scraperImage:
repository: docker.io/kubernetesui/dashboard-metrics-scraper
pullPolicy: IfNotPresent
tag: 1.2.1@sha256:82afbb4ed7e6f83b88a5950fd7bff9b144034d6390c1d54bef710982c73a7310
service:
main:
enabled: true
ports:
main:
enabled: true
primary: true
port: 80
targetPort: 3000
protocol: http
kubernetes-dashboard-forward:
expandObjectName: false
enabled: true
ports:
forward:
enabled: true
port: 8443
targetPort: 8443
protocol: https
selectorLabels:
app.kubernetes.io/name: kong
app.kubernetes.io/component: app
kubernetes-dashboard-web:
expandObjectName: false
enabled: true
targetSelector: web
ports:
web:
enabled: true
port: 8000
targetPort: 8000
protocol: http
kubernetes-dashboard-api:
expandObjectName: false
enabled: true
targetSelector: api
ports:
api:
enabled: true
port: 8000
targetPort: 8000
protocol: http
kubernetes-dashboard-auth:
expandObjectName: false
enabled: true
targetSelector: auth
ports:
auth:
enabled: true
port: 8000
targetPort: 8000
protocol: http
kubernetes-dashboard-scraper:
expandObjectName: false
enabled: true
targetSelector: scraper
ports:
scraper:
enabled: true
port: 8000
targetPort: 8000
protocol: http
workload:
main:
enabled: true
primary: true
type: Deployment
podSpec:
containers:
main:
enabled: true
primary: true
env:
PORT: 3000
API_FILE: /var/run/secrets/kubernetes.io/serviceaccount/token
PROXY_TARGET: https://kubernetes-dashboard-forward:8443
AUTH_TOKEN_HEADER: Authorization
AUTH_TOKEN_PREFIX: Bearer
# We can potentially use this in the future...
CSRF_TOKEN: ""
probes:
liveness:
enabled: true
type: tcp
port: 3000
readiness:
enabled: true
type: tcp
port: 3000
startup:
enabled: true
type: tcp
port: 3000
web:
enabled: true
type: Deployment
podSpec:
containers:
web:
enabled: true
primary: true
imageSelector: webImage
args:
- --namespace={{ .Release.Namespace }}
- --settings-config-map-name=kubernetes-dashboard-settings
# GOMAXPROCS:
# resourceFieldRef:
# resource: limits.cpu
# GOMEMLIMIT:
# valueFrom:
# resourceFieldRef:
# resource: limits.memory
probes:
liveness:
enabled: true
type: http
port: 8000
readiness:
enabled: true
type: http
port: 8000
startup:
enabled: true
type: http
port: 8000
api:
enabled: true
type: Deployment
podSpec:
containers:
api:
enabled: true
primary: true
imageSelector: apiImage
args:
- --namespace={{ .Release.Namespace }}
- --metrics-scraper-service-name=kubernetes-dashboard-scraper
env:
CSRF_KEY:
secretKeyRef:
name: csrf
key: private.key
# GOMAXPROCS:
# resourceFieldRef:
# resource: limits.cpu
# GOMEMLIMIT:
# valueFrom:
# resourceFieldRef:
# resource: limits.memory
probes:
liveness:
enabled: true
type: http
port: 8000
path: /metrics
readiness:
enabled: true
type: http
port: 8000
path: /metrics
startup:
enabled: true
type: http
port: 8000
path: /metrics
auth:
enabled: true
type: Deployment
podSpec:
containers:
auth:
enabled: true
primary: true
imageSelector: authImage
env:
CSRF_KEY:
secretKeyRef:
name: csrf
key: private.key
# GOMAXPROCS:
# resourceFieldRef:
# resource: limits.cpu
# GOMEMLIMIT:
# valueFrom:
# resourceFieldRef:
# resource: limits.memory
probes:
liveness:
enabled: true
type: tcp
port: 8000
readiness:
enabled: true
type: tcp
port: 8000
startup:
enabled: true
type: tcp
port: 8000
scraper:
enabled: true
type: Deployment
podSpec:
containers:
scraper:
enabled: true
primary: true
imageSelector: scraperImage
env:
CSRF_KEY:
secretKeyRef:
name: csrf
key: private.key
# GOMAXPROCS:
# resourceFieldRef:
# resource: limits.cpu
# GOMEMLIMIT:
# valueFrom:
# resourceFieldRef:
# resource: limits.memory
probes:
liveness:
enabled: true
type: http
port: 8000
readiness:
enabled: true
type: http
port: 8000
startup:
enabled: true
type: http
port: 8000
podOptions:
automountServiceAccountToken: true
configmap:
kubernetes-dashboard-settings:
expandObjectName: false
enabled: true
data:
settings: '{"itemsPerPage":100}'
kubedashboard-konggateway:
enabled: true
expandObjectName: false
data:
kong.yml: |
_format_version: "3.0"
services:
- name: auth
host: kubernetes-dashboard-auth
port: 8000
protocol: http
routes:
- name: authLogin
paths:
- /api/v1/login
strip_path: false
- name: authCsrf
paths:
- /api/v1/csrftoken/login
strip_path: false
- name: authMe
paths:
- /api/v1/me
strip_path: false
- name: api
host: kubernetes-dashboard-api
port: 8000
protocol: http
routes:
- name: api
paths:
- /api
strip_path: false
- name: metrics
paths:
- /metrics
strip_path: false
- name: web
host: kubernetes-dashboard-web
port: 8000
protocol: http
routes:
- name: root
paths:
- /
strip_path: false
secret:
csrf:
enabled: true
data:
private.key: dwpcRea9BZEaYQ2va/up6uL39GDFAY7bBpU4knT3wgeUNk9GPaiZjmisaKuLuEoKj5TCIQ7g+9ig07KpYc341ZbV3AJPl36YHSyx/Qv/n2yZT9XgpNoB2FM6f0gs8DquqSEuigxh/kHJREUiHQmQCk09SHmtdY3FpioU30ge69MCRmtDfvdh9XmytAb4u3uqxIfAd9BdJpGhg6m0eIAMyBtMtvZ2yzyTaZ2OuuKfspuQZe8ab2Bp+PHlK8Skq64E/RO2Uw4cnQGMqcAxatK3dEO2hmGXN2mnYXqAswKHHybAWlBUmTOrCHRncS77y2f40JOOmdhkFRDFIqgNT/yi7w==
portal:
open:
enabled: true
## TODO: Split into multiple rbacs
## TODO: Implement these: https://github.com/kubernetes/dashboard/tree/master/charts/kubernetes-dashboard/templates/rbac/api
rbac:
main:
enabled: true
primary: true
clusterWide: true
rules:
- apiGroups: [""]
resources: ["secrets"]
resourceNames:
[
"kubernetes-dashboard-key-holder",
"kubernetes-dashboard-certs",
"kubernetes-dashboard-csrf",
]
verbs: ["get", "update", "delete"]
# Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- apiGroups: [""]
resources: ["configmaps"]
resourceNames: ["kubernetes-dashboard-settings"]
verbs: ["get", "update"]
# Allow Dashboard to get metrics.
- apiGroups: [""]
resources: ["services"]
resourceNames: ["heapster", "dashboard-metrics-scraper"]
verbs: ["proxy"]
- apiGroups: [""]
resources: ["services/proxy"]
resourceNames:
[
"heapster",
"http:heapster:",
"https:heapster:",
"dashboard-metrics-scraper",
"http:dashboard-metrics-scraper",
]
verbs: ["get"]
- apiGroups: ["metrics.k8s.io"]
resources: ["pods", "nodes"]
verbs: ["get", "list", "watch"]
# Give all-access
- apiGroups: ["*"]
resources: ["*"]
verbs: ["*"]
# -- The service account the pods will use to interact with the Kubernetes API
serviceAccount:
main:
enabled: true
primary: true
targetSelectAll: true
## Required Kong sub-chart with DBless configuration to act as a gateway
## for our all containers.
kong:
enabled: true
manager:
enabled: false
## Configuration reference: https://docs.konghq.com/gateway/3.6.x/reference/configuration
env:
dns_order: LAST,A,CNAME,AAAA,SRV
plugins: "off"
nginx_worker_processes: 1
ingressController:
enabled: false
dblessConfig:
configMap: kubedashboard-konggateway
proxy:
type: ClusterIP
http:
enabled: false
## TODO Pre-configure ingress if needed
## Ingress hint:
# apiVersion: traefik.io/v1alpha1
# kind: IngressRoute
# metadata:
# name: kubdashboard-ingressroute
# namespace: kubernetes-dashboard
# spec:
# entryPoints: [websecure]
# routes:
# - kind: Rule
# match: PathPrefix(`/kubernetes-dashboard`)
# services:
# - kind: Service
# name: kubernetes-dashboard-kong-proxy
# namespace: kubernetes-dashboard
# port: kong-proxy
# middlewares:
# - name: stripkubdashboard
# namespace: kubernetes-dashboard
#
# ---
#
# apiVersion: traefik.io/v1alpha1
# kind: Middleware
# metadata:
# name: stripkubdashboard
# namespace: kubernetes-dashboard
# spec:
# stripPrefix:
# prefixes:
# - "/kubernetes-dashboard"
# forceSlash: true
# kong:
# proxy:
# http:
# enabled: true