This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/kubernetesui/dashboard-web](https://redirect.github.com/kubernetes/dashboard) | minor | `2c4f217` -> `67d4304` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>kubernetes/dashboard (docker.io/kubernetesui/dashboard-web)</summary> ### [`v1.6.0`](https://redirect.github.com/kubernetes/dashboard/releases/tag/v1.6.0) #### Breaking change Due to migration to [client-go](https://redirect.github.com/kubernetes/client-go) Dashboard no longer supports in-cluster config without enabled Service Accounts. You can read more about it in our [troubleshooting guide](https://redirect.github.com/kubernetes/dashboard/blob/master/docs/user-guide/troubleshooting.md). #### Changelog ##### Bug Fixes - Don't display pods for services without selector - Return status 200 instead of 201 while getting resources - Fix "unknown creator" display bug - Fix status icon for terminated successful pods - Use valid error status coming from cluster - Fix orphaned pods view bug - Fix node events - Fix card issue on daemon set and node details view - Fix created by list on pod detail page ##### Features - Add Storage Classes view - Add initial Third Party Resources view - Add `bind-address` CLI option - Add custom page title for each view - Parse URLs in annotations - Add events list for Pods view - Update Japanese translations - Improve project documentation - Migrate to Kubernetes `client-go` and refactor backend - Update internal error page - Cap Dashboard's replica set limit at 10 #### Images gcr.io/google_containers/kubernetes-dashboard-arm64:v1.6.0 gcr.io/google_containers/kubernetes-dashboard-amd64:v1.6.0 gcr.io/google_containers/kubernetes-dashboard-ppc64le:v1.6.0 gcr.io/google_containers/kubernetes-dashboard-arm:v1.6.0 #### Installation ```bash kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.6.0/src/deploy/kubernetes-dashboard.yaml ``` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMzUuMyIsInVwZGF0ZWRJblZlciI6IjM4LjEzNS4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
444 lines
11 KiB
YAML
444 lines
11 KiB
YAML
image:
|
|
pullPolicy: IfNotPresent
|
|
repository: tccr.io/tccr/kube-sa-proxy
|
|
tag: latest
|
|
|
|
webImage:
|
|
repository: docker.io/kubernetesui/dashboard-web
|
|
pullPolicy: IfNotPresent
|
|
tag: 1.6.0@sha256:67d4304dac880fbdda911842c550a64158245a8a3d3b011464e29c9586292205
|
|
|
|
authImage:
|
|
repository: docker.io/kubernetesui/dashboard-auth
|
|
pullPolicy: IfNotPresent
|
|
tag: 1.2.2@sha256:2d292e8fd82155fe0e5c98cac136fd4ea94d4325169527d465e07318d0de4f51
|
|
|
|
apiImage:
|
|
repository: docker.io/kubernetesui/dashboard-api
|
|
pullPolicy: IfNotPresent
|
|
tag: 1.10.1@sha256:a73ae2274e47dc5339f69bd97c9d80a299c2ae1b45eef4d1b32390e248980dd5
|
|
|
|
scraperImage:
|
|
repository: docker.io/kubernetesui/dashboard-metrics-scraper
|
|
pullPolicy: IfNotPresent
|
|
tag: 1.2.1@sha256:82afbb4ed7e6f83b88a5950fd7bff9b144034d6390c1d54bef710982c73a7310
|
|
|
|
service:
|
|
main:
|
|
enabled: true
|
|
ports:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
port: 80
|
|
targetPort: 3000
|
|
protocol: http
|
|
kubernetes-dashboard-forward:
|
|
expandObjectName: false
|
|
enabled: true
|
|
ports:
|
|
forward:
|
|
enabled: true
|
|
port: 8443
|
|
targetPort: 8443
|
|
protocol: https
|
|
selectorLabels:
|
|
app.kubernetes.io/name: kong
|
|
app.kubernetes.io/component: app
|
|
kubernetes-dashboard-web:
|
|
expandObjectName: false
|
|
enabled: true
|
|
targetSelector: web
|
|
ports:
|
|
web:
|
|
enabled: true
|
|
port: 8000
|
|
targetPort: 8000
|
|
protocol: http
|
|
kubernetes-dashboard-api:
|
|
expandObjectName: false
|
|
enabled: true
|
|
targetSelector: api
|
|
ports:
|
|
api:
|
|
enabled: true
|
|
port: 8000
|
|
targetPort: 8000
|
|
protocol: http
|
|
kubernetes-dashboard-auth:
|
|
expandObjectName: false
|
|
enabled: true
|
|
targetSelector: auth
|
|
ports:
|
|
auth:
|
|
enabled: true
|
|
port: 8000
|
|
targetPort: 8000
|
|
protocol: http
|
|
kubernetes-dashboard-scraper:
|
|
expandObjectName: false
|
|
enabled: true
|
|
targetSelector: scraper
|
|
ports:
|
|
scraper:
|
|
enabled: true
|
|
port: 8000
|
|
targetPort: 8000
|
|
protocol: http
|
|
|
|
workload:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
env:
|
|
PORT: 3000
|
|
API_FILE: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
PROXY_TARGET: https://kubernetes-dashboard-forward:8443
|
|
AUTH_TOKEN_HEADER: Authorization
|
|
AUTH_TOKEN_PREFIX: Bearer
|
|
# We can potentially use this in the future...
|
|
CSRF_TOKEN: ""
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
type: tcp
|
|
port: 3000
|
|
readiness:
|
|
enabled: true
|
|
type: tcp
|
|
port: 3000
|
|
startup:
|
|
enabled: true
|
|
type: tcp
|
|
port: 3000
|
|
web:
|
|
enabled: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
web:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: webImage
|
|
args:
|
|
- --namespace={{ .Release.Namespace }}
|
|
- --settings-config-map-name=kubernetes-dashboard-settings
|
|
# GOMAXPROCS:
|
|
# resourceFieldRef:
|
|
# resource: limits.cpu
|
|
# GOMEMLIMIT:
|
|
# valueFrom:
|
|
# resourceFieldRef:
|
|
# resource: limits.memory
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
readiness:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
startup:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
api:
|
|
enabled: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
api:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: apiImage
|
|
args:
|
|
- --namespace={{ .Release.Namespace }}
|
|
- --metrics-scraper-service-name=kubernetes-dashboard-scraper
|
|
env:
|
|
CSRF_KEY:
|
|
secretKeyRef:
|
|
name: csrf
|
|
key: private.key
|
|
|
|
# GOMAXPROCS:
|
|
# resourceFieldRef:
|
|
# resource: limits.cpu
|
|
# GOMEMLIMIT:
|
|
# valueFrom:
|
|
# resourceFieldRef:
|
|
# resource: limits.memory
|
|
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
path: /metrics
|
|
readiness:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
path: /metrics
|
|
startup:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
path: /metrics
|
|
|
|
auth:
|
|
enabled: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
auth:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: authImage
|
|
env:
|
|
CSRF_KEY:
|
|
secretKeyRef:
|
|
name: csrf
|
|
key: private.key
|
|
|
|
# GOMAXPROCS:
|
|
# resourceFieldRef:
|
|
# resource: limits.cpu
|
|
# GOMEMLIMIT:
|
|
# valueFrom:
|
|
# resourceFieldRef:
|
|
# resource: limits.memory
|
|
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
type: tcp
|
|
port: 8000
|
|
readiness:
|
|
enabled: true
|
|
type: tcp
|
|
port: 8000
|
|
startup:
|
|
enabled: true
|
|
type: tcp
|
|
port: 8000
|
|
|
|
scraper:
|
|
enabled: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
scraper:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: scraperImage
|
|
env:
|
|
CSRF_KEY:
|
|
secretKeyRef:
|
|
name: csrf
|
|
key: private.key
|
|
|
|
# GOMAXPROCS:
|
|
# resourceFieldRef:
|
|
# resource: limits.cpu
|
|
# GOMEMLIMIT:
|
|
# valueFrom:
|
|
# resourceFieldRef:
|
|
# resource: limits.memory
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
readiness:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
startup:
|
|
enabled: true
|
|
type: http
|
|
port: 8000
|
|
|
|
podOptions:
|
|
automountServiceAccountToken: true
|
|
|
|
configmap:
|
|
kubernetes-dashboard-settings:
|
|
expandObjectName: false
|
|
enabled: true
|
|
data:
|
|
settings: '{"itemsPerPage":100}'
|
|
kubedashboard-konggateway:
|
|
enabled: true
|
|
expandObjectName: false
|
|
data:
|
|
kong.yml: |
|
|
_format_version: "3.0"
|
|
services:
|
|
- name: auth
|
|
host: kubernetes-dashboard-auth
|
|
port: 8000
|
|
protocol: http
|
|
routes:
|
|
- name: authLogin
|
|
paths:
|
|
- /api/v1/login
|
|
strip_path: false
|
|
- name: authCsrf
|
|
paths:
|
|
- /api/v1/csrftoken/login
|
|
strip_path: false
|
|
- name: authMe
|
|
paths:
|
|
- /api/v1/me
|
|
strip_path: false
|
|
- name: api
|
|
host: kubernetes-dashboard-api
|
|
port: 8000
|
|
protocol: http
|
|
routes:
|
|
- name: api
|
|
paths:
|
|
- /api
|
|
strip_path: false
|
|
- name: metrics
|
|
paths:
|
|
- /metrics
|
|
strip_path: false
|
|
- name: web
|
|
host: kubernetes-dashboard-web
|
|
port: 8000
|
|
protocol: http
|
|
routes:
|
|
- name: root
|
|
paths:
|
|
- /
|
|
strip_path: false
|
|
|
|
secret:
|
|
csrf:
|
|
enabled: true
|
|
data:
|
|
private.key: dwpcRea9BZEaYQ2va/up6uL39GDFAY7bBpU4knT3wgeUNk9GPaiZjmisaKuLuEoKj5TCIQ7g+9ig07KpYc341ZbV3AJPl36YHSyx/Qv/n2yZT9XgpNoB2FM6f0gs8DquqSEuigxh/kHJREUiHQmQCk09SHmtdY3FpioU30ge69MCRmtDfvdh9XmytAb4u3uqxIfAd9BdJpGhg6m0eIAMyBtMtvZ2yzyTaZ2OuuKfspuQZe8ab2Bp+PHlK8Skq64E/RO2Uw4cnQGMqcAxatK3dEO2hmGXN2mnYXqAswKHHybAWlBUmTOrCHRncS77y2f40JOOmdhkFRDFIqgNT/yi7w==
|
|
|
|
portal:
|
|
open:
|
|
enabled: true
|
|
|
|
## TODO: Split into multiple rbacs
|
|
## TODO: Implement these: https://github.com/kubernetes/dashboard/tree/master/charts/kubernetes-dashboard/templates/rbac/api
|
|
rbac:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
clusterWide: true
|
|
rules:
|
|
- apiGroups: [""]
|
|
resources: ["secrets"]
|
|
resourceNames:
|
|
[
|
|
"kubernetes-dashboard-key-holder",
|
|
"kubernetes-dashboard-certs",
|
|
"kubernetes-dashboard-csrf",
|
|
]
|
|
verbs: ["get", "update", "delete"]
|
|
# Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
|
|
- apiGroups: [""]
|
|
resources: ["configmaps"]
|
|
resourceNames: ["kubernetes-dashboard-settings"]
|
|
verbs: ["get", "update"]
|
|
# Allow Dashboard to get metrics.
|
|
- apiGroups: [""]
|
|
resources: ["services"]
|
|
resourceNames: ["heapster", "dashboard-metrics-scraper"]
|
|
verbs: ["proxy"]
|
|
- apiGroups: [""]
|
|
resources: ["services/proxy"]
|
|
resourceNames:
|
|
[
|
|
"heapster",
|
|
"http:heapster:",
|
|
"https:heapster:",
|
|
"dashboard-metrics-scraper",
|
|
"http:dashboard-metrics-scraper",
|
|
]
|
|
verbs: ["get"]
|
|
- apiGroups: ["metrics.k8s.io"]
|
|
resources: ["pods", "nodes"]
|
|
verbs: ["get", "list", "watch"]
|
|
# Give all-access
|
|
- apiGroups: ["*"]
|
|
resources: ["*"]
|
|
verbs: ["*"]
|
|
|
|
# -- The service account the pods will use to interact with the Kubernetes API
|
|
serviceAccount:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
targetSelectAll: true
|
|
|
|
## Required Kong sub-chart with DBless configuration to act as a gateway
|
|
## for our all containers.
|
|
kong:
|
|
enabled: true
|
|
manager:
|
|
enabled: false
|
|
## Configuration reference: https://docs.konghq.com/gateway/3.6.x/reference/configuration
|
|
env:
|
|
dns_order: LAST,A,CNAME,AAAA,SRV
|
|
plugins: "off"
|
|
nginx_worker_processes: 1
|
|
ingressController:
|
|
enabled: false
|
|
dblessConfig:
|
|
configMap: kubedashboard-konggateway
|
|
proxy:
|
|
type: ClusterIP
|
|
http:
|
|
enabled: false
|
|
## TODO Pre-configure ingress if needed
|
|
## Ingress hint:
|
|
# apiVersion: traefik.io/v1alpha1
|
|
# kind: IngressRoute
|
|
# metadata:
|
|
# name: kubdashboard-ingressroute
|
|
# namespace: kubernetes-dashboard
|
|
# spec:
|
|
# entryPoints: [websecure]
|
|
# routes:
|
|
# - kind: Rule
|
|
# match: PathPrefix(`/kubernetes-dashboard`)
|
|
# services:
|
|
# - kind: Service
|
|
# name: kubernetes-dashboard-kong-proxy
|
|
# namespace: kubernetes-dashboard
|
|
# port: kong-proxy
|
|
# middlewares:
|
|
# - name: stripkubdashboard
|
|
# namespace: kubernetes-dashboard
|
|
#
|
|
# ---
|
|
#
|
|
# apiVersion: traefik.io/v1alpha1
|
|
# kind: Middleware
|
|
# metadata:
|
|
# name: stripkubdashboard
|
|
# namespace: kubernetes-dashboard
|
|
# spec:
|
|
# stripPrefix:
|
|
# prefixes:
|
|
# - "/kubernetes-dashboard"
|
|
# forceSlash: true
|
|
|
|
# kong:
|
|
# proxy:
|
|
# http:
|
|
# enabled: true
|