feat(helm)!: Update Chart kubernetes-dashboard to 7.10.4 #276
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
forensics-bot
bot
added
size/XS
|
Path: @@ -1,5 +1,15 @@
---
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
+# Source: kubernetes-dashboard/charts/kong/templates/service-account.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+# Source: kubernetes-dashboard/templates/rbac/api/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -13,17 +23,16 @@
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
-
+---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -38,42 +47,125 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-# kubernetes-dashboard-certs
apiVersion: v1
-kind: Secret
+kind: ServiceAccount
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/rbac/web/serviceaccount.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: v1
+kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+# Source: kubernetes-dashboard/templates/secrets/csrf.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
apiVersion: v1
kind: Secret
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
name: kubernetes-dashboard-csrf
-type: Opaque
+data:
+ private.key: "QjdYcXNYUVo4M0ZuN1hrNEFJWnc5RVROdmYrVFFUWVBHbDdNVG9OV0NmdTlTdmEyM0xEZVBMVEdaZ2ZreU9UQk56dUNLbnpqMFllaEM2TFBlajQvK3RiNWR3M2F2SGQzakJKU3Rtcm9BK0RCSUZwSWVYMHpBMEYyZ0JlNVExclR6aUwvMk1wQSsxZGxLQ1hqL1ZuTzNpYUpaaUdobzRNanVmcmpPQXVFNnEzQURvNXN2QTd2SlN1UGsyalB4aGpxSzhhN2VpMHdSRGpYUW12Zk5RQlJiVllBQkdLZkFwM1dlcnhSRHk0MXBVcjlLbkQ2WC9pVVdreTB0OEs0QkY5NTZZR2ZlM3RCZ092cDVMNkViUmwrWGo0Y2FkQXpaN3M3S1N2bjBuNGs0TVIwWWZkRitWTSsvUDlIYTdIRm81K2hSajZ3U3ZnTllWNU9WaGJLelF3akRnPT0="
+# Source: kubernetes-dashboard/templates/config/gateway.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
apiVersion: v1
-kind: Secret
+kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kong-dbless-config
+data:
+ kong.yml: |
+ _format_version: "3.0"
+ services:
+ - name: auth
+ host: kubernetes-dashboard-auth
+ port: 8000
+ protocol: http
+ routes:
+ - name: authLogin
+ paths:
+ - /api/v1/login
+ strip_path: false
+ - name: authCsrf
+ paths:
+ - /api/v1/csrftoken/login
+ strip_path: false
+ - name: api
+ host: kubernetes-dashboard-api
+ port: 8000
+ protocol: http
+ routes:
+ - name: api
+ paths:
+ - /api
+ strip_path: false
+ - name: metrics
+ paths:
+ - /metrics
+ strip_path: false
+ - name: web
+ host: kubernetes-dashboard-web
+ port: 8000
+ protocol: http
+ routes:
+ - name: root
+ paths:
+ - /
+ strip_path: false
+# Source: kubernetes-dashboard/templates/config/settings.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -92,14 +184,12 @@
kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
name: kubernetes-dashboard-settings
data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrole.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -117,18 +207,17 @@
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
rules:
# Allow Metrics Scraper to get metrics from the Metrics server
- apiGroups: ["metrics.k8s.io"]
resources: ["pods", "nodes"]
verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -146,21 +235,20 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
- name: kubernetes-dashboard-metrics
+ name: kubernetes-dashboard-metrics-scraper
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/role.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -175,36 +263,50 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-apiVersion: rbac.authorization.k8s.io/v1
kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
+ # Allow Dashboard API to get metrics from metrics-scraper.
- apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
+ resources: ["services/proxy"]
+ resourceNames: ["kubernetes-dashboard-metrics-scraper", "http:kubernetes-dashboard-metrics-scraper"]
+ verbs: ["get"]
+# Source: kubernetes-dashboard/templates/rbac/web/role.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+rules:
+ # Allow Dashboard Web to get and update 'kubernetes-dashboard-settings' config map.
- apiGroups: [""]
resources: ["configmaps"]
resourceNames: ["kubernetes-dashboard-settings"]
verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/rolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -222,21 +324,19 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-api
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/web/rolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -251,28 +351,169 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: kubernetes-dashboard-web
+subjects:
+ - kind: ServiceAccount
+ name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-manager.yaml
apiVersion: v1
kind: Service
metadata:
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-kong-manager
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+spec:
+ type: NodePort
+ ports:
+ - name: kong-manager
+ port: 8002
+ targetPort: 8002
+ protocol: TCP
+ - name: kong-manager-tls
+ port: 8445
+ targetPort: 8445
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-proxy.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-proxy
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ enable-metrics: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: kong-proxy-tls
+ port: 443
+ targetPort: 8443
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+# Source: kubernetes-dashboard/templates/services/api.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ name: kubernetes-dashboard-api
+spec:
+ ports:
+ - name: api
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/services/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ name: kubernetes-dashboard-auth
+spec:
+ ports:
+ - name: auth
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+# Source: kubernetes-dashboard/templates/services/metrics-scraper.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ name: kubernetes-dashboard-metrics-scraper
spec:
- type: ClusterIP
ports:
- - port: 443
- targetPort: https
- name: https
+ - port: 8000
selector:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/services/web.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -287,109 +528,602 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ name: kubernetes-dashboard-web
+spec:
+ ports:
+ - name: web
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
- name: kubernetes-dashboard
- annotations:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ template:
+ metadata:
+ annotations:
+ kuma.io/service-account-token-volume: kubernetes-dashboard-kong-token
+ kuma.io/gateway: "enabled"
+ traffic.sidecar.istio.io/includeInboundPorts: ""
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+ app: kubernetes-dashboard-kong
+ version: "3.6"
+ spec:
+ serviceAccountName: kubernetes-dashboard-kong
+ automountServiceAccountToken: false
+ initContainers:
+ - name: clear-stale-pid
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ resources: {}
+ command:
+ - "rm"
+ - "-vrf"
+ - "$KONG_PREFIX/pids"
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ containers:
+ - name: "proxy"
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ - name: KONG_NGINX_DAEMON
+ value: "off"
+ lifecycle:
+ preStop:
+ exec:
+ command:
+ - kong
+ - quit
+ - --wait=15
+ ports:
+ - name: proxy-tls
+ containerPort: 8443
+ protocol: TCP
+ - name: status
+ containerPort: 8100
+ protocol: TCP
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ readinessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status/ready
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ livenessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources: {}
+ securityContext: {}
+ terminationGracePeriodSeconds: 30
+ volumes:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ emptyDir:
+ sizeLimit: 256Mi
+ - name: kubernetes-dashboard-kong-tmp
+ emptyDir:
+ sizeLimit: 1Gi
+ - name: kubernetes-dashboard-kong-token
+ projected:
+ sources:
+ - serviceAccountToken:
+ expirationSeconds: 3607
+ path: token
+ - configMap:
+ items:
+ - key: ca.crt
+ path: ca.crt
+ name: kube-root-ca.crt
+ - downwardAPI:
+ items:
+ - fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ path: namespace
+ - name: kong-custom-dbless-config-volume
+ configMap:
+ name: kong-dbless-config
+# Source: kubernetes-dashboard/templates/deployments/api.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ name: kubernetes-dashboard-api
spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
+ replicas: 3
+ revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
template:
metadata:
- annotations:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
+ - name: kubernetes-dashboard-api
+ image: "docker.io/kubernetesui/dashboard-api:1.2.0"
imagePullPolicy: IfNotPresent
args:
- --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
+ - --metrics-scraper-service-name=kubernetes-dashboard-metrics-scraper
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
ports:
- - name: https
- containerPort: 8443
+ - containerPort: 8000
+ name: api
protocol: TCP
volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- mountPath: /tmp
name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
resources:
limits:
- cpu: 2
- memory: 200Mi
+ cpu: 250m
+ memory: 400Mi
requests:
cpu: 100m
memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/deployments/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ name: kubernetes-dashboard-auth
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ spec:
+ containers:
+ - name: kubernetes-dashboard-auth
+ image: "docker.io/kubernetesui/dashboard-auth:1.1.0"
+ imagePullPolicy: IfNotPresent
+ args:
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
+ ports:
+ - containerPort: 8000
+ name: auth
+ protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+# Source: kubernetes-dashboard/templates/deployments/metrics-scraper.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ spec:
+ containers:
+ - name: kubernetes-dashboard-metrics-scraper
+ image: "docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1"
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8000
protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
livenessProbe:
httpGet:
- scheme: HTTP
path: /
port: 8000
+ scheme: HTTP
initialDelaySeconds: 30
timeoutSeconds: 30
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/deployments/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ name: kubernetes-dashboard-web
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ spec:
+ containers:
+ - name: kubernetes-dashboard-web
+ image: "docker.io/kubernetesui/dashboard-web:1.2.0"
+ imagePullPolicy: IfNotPresent
+ args:
+ - --settings-config-map-name=kubernetes-dashboard-settings
+ - --locale-config=/locale_conf.json
+ ports:
+ - containerPort: 8000
+ name: web
+ protocol: TCP
volumeMounts:
- mountPath: /tmp
name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-web
---
--- |
🦙 MegaLinter status: ✅ SUCCESS
See detailed report in MegaLinter reports MegaLinter is graciously provided by |
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
037ba30 to
be6cb0b
Compare
renovate
bot
changed the title
|
Path: @@ -1,5 +1,15 @@
---
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
+# Source: kubernetes-dashboard/charts/kong/templates/service-account.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+# Source: kubernetes-dashboard/templates/rbac/api/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -13,17 +23,16 @@
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
-
+---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -38,42 +47,125 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-# kubernetes-dashboard-certs
apiVersion: v1
-kind: Secret
+kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/rbac/web/serviceaccount.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+# Source: kubernetes-dashboard/templates/secrets/csrf.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
apiVersion: v1
kind: Secret
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
name: kubernetes-dashboard-csrf
-type: Opaque
+data:
+ private.key: "eHRvaTluSmVUWUVQb1UwZ1ZVdkdyK2ZrazI0TWpjTHBMVWw4TTFlM3M2NldkV1RZVWdIQmNKRTd4amhHM3BSb3NUNG5CVWFsVnRqbmJDWmJZbUpKS1d5bEg2R2JFNnMxbWduWWF6Rm40NCtNWmVJbStsK25wL1N2cVJTYXdnRFZHdklZcHQxNkh2MktLSmM5cVBQNDJza3EySC94M2c1K0V3QlZTdWhqTVg2YmpsdzFDOHJhVkhoa1QzMFFlbUpYb0ViY2xXYWhKb1hMVk1FSlFIN1hUOWtabDR4aklxNkZnSlBBRVZBUlVROVV2TXNKY25Ib2xyNGRZMGlkOXp6ZHYyc3ZHVzFTR0kxcUNZb0ZKRjhkMmVyVFVUN09aMjVtWk1Pdk85ZEZLUEZsaElXNWpXM3AyMFFPTUlCNnJGU3l1UUpQT0RJbXR0NjljdFlUZzZrS2pRPT0="
+# Source: kubernetes-dashboard/templates/config/gateway.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
apiVersion: v1
-kind: Secret
+kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kong-dbless-config
+data:
+ kong.yml: |
+ _format_version: "3.0"
+ services:
+ - name: auth
+ host: kubernetes-dashboard-auth
+ port: 8000
+ protocol: http
+ routes:
+ - name: authLogin
+ paths:
+ - /api/v1/login
+ strip_path: false
+ - name: authCsrf
+ paths:
+ - /api/v1/csrftoken/login
+ strip_path: false
+ - name: api
+ host: kubernetes-dashboard-api
+ port: 8000
+ protocol: http
+ routes:
+ - name: api
+ paths:
+ - /api
+ strip_path: false
+ - name: metrics
+ paths:
+ - /metrics
+ strip_path: false
+ - name: web
+ host: kubernetes-dashboard-web
+ port: 8000
+ protocol: http
+ routes:
+ - name: root
+ paths:
+ - /
+ strip_path: false
+# Source: kubernetes-dashboard/templates/config/settings.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -92,14 +184,12 @@
kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web-settings
data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrole.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -117,18 +207,17 @@
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
rules:
# Allow Metrics Scraper to get metrics from the Metrics server
- apiGroups: ["metrics.k8s.io"]
resources: ["pods", "nodes"]
verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -146,21 +235,20 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
- name: kubernetes-dashboard-metrics
+ name: kubernetes-dashboard-metrics-scraper
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/role.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -175,36 +263,50 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-apiVersion: rbac.authorization.k8s.io/v1
kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
+ # Allow Dashboard API to get metrics from metrics-scraper.
- apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
+ resources: ["services/proxy"]
+ resourceNames: ["kubernetes-dashboard-metrics-scraper", "http:kubernetes-dashboard-metrics-scraper"]
+ verbs: ["get"]
+# Source: kubernetes-dashboard/templates/rbac/web/role.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+rules:
+ # Allow Dashboard Web to get and update 'kubernetes-dashboard-settings' config map.
- apiGroups: [""]
resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
+ resourceNames: ["kubernetes-dashboard-web-settings"]
verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/rolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -222,21 +324,98 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-api
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/web/rolebinding.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: kubernetes-dashboard-web
+subjects:
+ - kind: ServiceAccount
+ name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-manager.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-manager
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+spec:
+ type: NodePort
+ ports:
+ - name: kong-manager
+ port: 8002
+ targetPort: 8002
+ protocol: TCP
+ - name: kong-manager-tls
+ port: 8445
+ targetPort: 8445
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-proxy.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-proxy
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ enable-metrics: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: kong-proxy-tls
+ port: 443
+ targetPort: 8443
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+# Source: kubernetes-dashboard/templates/services/api.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -251,28 +430,58 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ name: kubernetes-dashboard-api
+spec:
+ ports:
+ - name: api
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/services/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
kind: Service
+apiVersion: v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ name: kubernetes-dashboard-auth
spec:
- type: ClusterIP
ports:
- - port: 443
- targetPort: https
- name: https
+ - name: auth
+ port: 8000
selector:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+# Source: kubernetes-dashboard/templates/services/metrics-scraper.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -287,109 +496,644 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ ports:
+ - port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/services/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ name: kubernetes-dashboard-web
+spec:
+ ports:
+ - name: web
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
- name: kubernetes-dashboard
- annotations:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ template:
+ metadata:
+ annotations:
+ kuma.io/service-account-token-volume: kubernetes-dashboard-kong-token
+ kuma.io/gateway: "enabled"
+ traffic.sidecar.istio.io/includeInboundPorts: ""
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+ app: kubernetes-dashboard-kong
+ version: "3.6"
+ spec:
+ serviceAccountName: kubernetes-dashboard-kong
+ automountServiceAccountToken: false
+ initContainers:
+ - name: clear-stale-pid
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ resources: {}
+ command:
+ - "rm"
+ - "-vrf"
+ - "$KONG_PREFIX/pids"
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ containers:
+ - name: "proxy"
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ - name: KONG_NGINX_DAEMON
+ value: "off"
+ lifecycle:
+ preStop:
+ exec:
+ command:
+ - kong
+ - quit
+ - --wait=15
+ ports:
+ - name: proxy-tls
+ containerPort: 8443
+ protocol: TCP
+ - name: status
+ containerPort: 8100
+ protocol: TCP
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ readinessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status/ready
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ livenessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources: {}
+ securityContext: {}
+ terminationGracePeriodSeconds: 30
+ volumes:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ emptyDir:
+ sizeLimit: 256Mi
+ - name: kubernetes-dashboard-kong-tmp
+ emptyDir:
+ sizeLimit: 1Gi
+ - name: kubernetes-dashboard-kong-token
+ projected:
+ sources:
+ - serviceAccountToken:
+ expirationSeconds: 3607
+ path: token
+ - configMap:
+ items:
+ - key: ca.crt
+ path: ca.crt
+ name: kube-root-ca.crt
+ - downwardAPI:
+ items:
+ - fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ path: namespace
+ - name: kong-custom-dbless-config-volume
+ configMap:
+ name: kong-dbless-config
+# Source: kubernetes-dashboard/templates/deployments/api.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ name: kubernetes-dashboard-api
spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
+ replicas: 3
+ revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
template:
metadata:
- annotations:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ rollme: "SmAc0"
spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
+ - name: kubernetes-dashboard-api
+ image: "docker.io/kubernetesui/dashboard-api:1.2.0"
imagePullPolicy: IfNotPresent
args:
- --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
+ - --metrics-scraper-service-name=kubernetes-dashboard-metrics-scraper
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
ports:
- - name: https
- containerPort: 8443
+ - containerPort: 8000
+ name: api
protocol: TCP
volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- mountPath: /tmp
name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
resources:
limits:
- cpu: 2
- memory: 200Mi
+ cpu: 250m
+ memory: 400Mi
requests:
cpu: 100m
memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/deployments/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ name: kubernetes-dashboard-auth
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ rollme: "zV7os"
+ spec:
+ containers:
+ - name: kubernetes-dashboard-auth
+ image: "docker.io/kubernetesui/dashboard-auth:1.1.0"
+ imagePullPolicy: IfNotPresent
+ args:
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
+ ports:
+ - containerPort: 8000
+ name: auth
+ protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+# Source: kubernetes-dashboard/templates/deployments/metrics-scraper.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-metrics-scraper
+ image: "docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1"
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8000
protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
livenessProbe:
httpGet:
- scheme: HTTP
path: /
port: 8000
+ scheme: HTTP
initialDelaySeconds: 30
timeoutSeconds: 30
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/deployments/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ name: kubernetes-dashboard-web
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-web
+ image: "docker.io/kubernetesui/dashboard-web:1.2.1"
+ imagePullPolicy: IfNotPresent
+ args:
+ - --namespace=default
+ - --settings-config-map-name=kubernetes-dashboard-web-settings
+ ports:
+ - containerPort: 8000
+ name: web
+ protocol: TCP
volumeMounts:
- mountPath: /tmp
name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-web
---
--- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
be6cb0b to
ac970e8
Compare
renovate
bot
changed the title
|
Path: @@ -1,5 +1,15 @@
---
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
+# Source: kubernetes-dashboard/charts/kong/templates/service-account.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+# Source: kubernetes-dashboard/templates/rbac/api/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -13,17 +23,16 @@
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
-
+---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -38,42 +47,125 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-# kubernetes-dashboard-certs
apiVersion: v1
-kind: Secret
+kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/rbac/web/serviceaccount.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+# Source: kubernetes-dashboard/templates/secrets/csrf.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
apiVersion: v1
kind: Secret
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
name: kubernetes-dashboard-csrf
-type: Opaque
+data:
+ private.key: "VDRUbEFaWUYreDY0OHRndEQ0aUZGS2xmRkpDRU9ZTmJ4TENZVlpOWkovT0ZtckQvamtEdlBYWGN1Tk5mVTZyb0NicGsyZVlQNGw5b1VQWDhXMCszZnhJaVorMnJQWC8vcTcyUDkxNE4rZ2ZGOHU4Znk0WmtvYjRuYUlTazRFa0p6UkFRWklkek1MMWtISjdEMDFGQWxvR3QzaG9rRFQ1RlEvVkN1MS9XdEdheVNELytEdWpEU1Jaak0rZEU1M3VXZFR3MUN2SGhxNkFjN3BaZm5RbDZ0Uk4wcFl1bHRBQkdtRGtSZWUrQ1hLa3hmeGNtdCtmaXpkSGxjYXRVYTRvZVRsOVpLY3NEWVQwcmpBWDdRV0ZvekFLcUMrM2ZrcmlpTFVSb3Mvc0lja290cmZFSmpCdHdoQ3JJcjFzY25RS21kejFCVi9KYUx0V1ZSdzJkTEp4Wk13PT0="
+# Source: kubernetes-dashboard/templates/config/gateway.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
apiVersion: v1
-kind: Secret
+kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kong-dbless-config
+data:
+ kong.yml: |
+ _format_version: "3.0"
+ services:
+ - name: auth
+ host: kubernetes-dashboard-auth
+ port: 8000
+ protocol: http
+ routes:
+ - name: authLogin
+ paths:
+ - /api/v1/login
+ strip_path: false
+ - name: authCsrf
+ paths:
+ - /api/v1/csrftoken/login
+ strip_path: false
+ - name: api
+ host: kubernetes-dashboard-api
+ port: 8000
+ protocol: http
+ routes:
+ - name: api
+ paths:
+ - /api
+ strip_path: false
+ - name: metrics
+ paths:
+ - /metrics
+ strip_path: false
+ - name: web
+ host: kubernetes-dashboard-web
+ port: 8000
+ protocol: http
+ routes:
+ - name: root
+ paths:
+ - /
+ strip_path: false
+# Source: kubernetes-dashboard/templates/config/settings.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -92,14 +184,12 @@
kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web-settings
data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrole.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -117,18 +207,17 @@
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
rules:
# Allow Metrics Scraper to get metrics from the Metrics server
- apiGroups: ["metrics.k8s.io"]
resources: ["pods", "nodes"]
verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -146,21 +235,20 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
- name: kubernetes-dashboard-metrics
+ name: kubernetes-dashboard-metrics-scraper
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/role.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -175,36 +263,50 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-apiVersion: rbac.authorization.k8s.io/v1
kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
+ # Allow Dashboard API to get metrics from metrics-scraper.
- apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
+ resources: ["services/proxy"]
+ resourceNames: ["kubernetes-dashboard-metrics-scraper", "http:kubernetes-dashboard-metrics-scraper"]
+ verbs: ["get"]
+# Source: kubernetes-dashboard/templates/rbac/web/role.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+rules:
+ # Allow Dashboard Web to get and update 'kubernetes-dashboard-settings' config map.
- apiGroups: [""]
resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
+ resourceNames: ["kubernetes-dashboard-web-settings"]
verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/rolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -222,21 +324,98 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-api
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/web/rolebinding.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: kubernetes-dashboard-web
+subjects:
+ - kind: ServiceAccount
+ name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-manager.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-manager
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+spec:
+ type: NodePort
+ ports:
+ - name: kong-manager
+ port: 8002
+ targetPort: 8002
+ protocol: TCP
+ - name: kong-manager-tls
+ port: 8445
+ targetPort: 8445
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-proxy.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-proxy
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ enable-metrics: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: kong-proxy-tls
+ port: 443
+ targetPort: 8443
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+# Source: kubernetes-dashboard/templates/services/api.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -251,28 +430,58 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ name: kubernetes-dashboard-api
+spec:
+ ports:
+ - name: api
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/services/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
kind: Service
+apiVersion: v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ name: kubernetes-dashboard-auth
spec:
- type: ClusterIP
ports:
- - port: 443
- targetPort: https
- name: https
+ - name: auth
+ port: 8000
selector:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+# Source: kubernetes-dashboard/templates/services/metrics-scraper.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -287,109 +496,644 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ ports:
+ - port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/services/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ name: kubernetes-dashboard-web
+spec:
+ ports:
+ - name: web
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
- name: kubernetes-dashboard
- annotations:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ template:
+ metadata:
+ annotations:
+ kuma.io/service-account-token-volume: kubernetes-dashboard-kong-token
+ kuma.io/gateway: "enabled"
+ traffic.sidecar.istio.io/includeInboundPorts: ""
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+ app: kubernetes-dashboard-kong
+ version: "3.6"
+ spec:
+ serviceAccountName: kubernetes-dashboard-kong
+ automountServiceAccountToken: false
+ initContainers:
+ - name: clear-stale-pid
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ resources: {}
+ command:
+ - "rm"
+ - "-vrf"
+ - "$KONG_PREFIX/pids"
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ containers:
+ - name: "proxy"
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ - name: KONG_NGINX_DAEMON
+ value: "off"
+ lifecycle:
+ preStop:
+ exec:
+ command:
+ - kong
+ - quit
+ - --wait=15
+ ports:
+ - name: proxy-tls
+ containerPort: 8443
+ protocol: TCP
+ - name: status
+ containerPort: 8100
+ protocol: TCP
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ readinessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status/ready
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ livenessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources: {}
+ securityContext: {}
+ terminationGracePeriodSeconds: 30
+ volumes:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ emptyDir:
+ sizeLimit: 256Mi
+ - name: kubernetes-dashboard-kong-tmp
+ emptyDir:
+ sizeLimit: 1Gi
+ - name: kubernetes-dashboard-kong-token
+ projected:
+ sources:
+ - serviceAccountToken:
+ expirationSeconds: 3607
+ path: token
+ - configMap:
+ items:
+ - key: ca.crt
+ path: ca.crt
+ name: kube-root-ca.crt
+ - downwardAPI:
+ items:
+ - fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ path: namespace
+ - name: kong-custom-dbless-config-volume
+ configMap:
+ name: kong-dbless-config
+# Source: kubernetes-dashboard/templates/deployments/api.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ name: kubernetes-dashboard-api
spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
+ replicas: 3
+ revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
template:
metadata:
- annotations:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ rollme: "VP9jn"
spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
+ - name: kubernetes-dashboard-api
+ image: "docker.io/kubernetesui/dashboard-api:1.2.0"
imagePullPolicy: IfNotPresent
args:
- --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
+ - --metrics-scraper-service-name=kubernetes-dashboard-metrics-scraper
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
ports:
- - name: https
- containerPort: 8443
+ - containerPort: 8000
+ name: api
protocol: TCP
volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- mountPath: /tmp
name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
resources:
limits:
- cpu: 2
- memory: 200Mi
+ cpu: 250m
+ memory: 400Mi
requests:
cpu: 100m
memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/deployments/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ name: kubernetes-dashboard-auth
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ rollme: "RTVWV"
+ spec:
+ containers:
+ - name: kubernetes-dashboard-auth
+ image: "docker.io/kubernetesui/dashboard-auth:1.1.0"
+ imagePullPolicy: IfNotPresent
+ args:
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
+ ports:
+ - containerPort: 8000
+ name: auth
+ protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+# Source: kubernetes-dashboard/templates/deployments/metrics-scraper.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-metrics-scraper
+ image: "docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1"
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8000
protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
livenessProbe:
httpGet:
- scheme: HTTP
path: /
port: 8000
+ scheme: HTTP
initialDelaySeconds: 30
timeoutSeconds: 30
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/deployments/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ name: kubernetes-dashboard-web
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-web
+ image: "docker.io/kubernetesui/dashboard-web:1.2.1"
+ imagePullPolicy: IfNotPresent
+ args:
+ - --namespace=default
+ - --settings-config-map-name=kubernetes-dashboard-web-settings
+ ports:
+ - containerPort: 8000
+ name: web
+ protocol: TCP
volumeMounts:
- mountPath: /tmp
name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-web
---
--- |
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
ac970e8 to
fd55cd2
Compare
|
Path: @@ -1,5 +1,15 @@
---
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
+# Source: kubernetes-dashboard/charts/kong/templates/service-account.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+# Source: kubernetes-dashboard/templates/rbac/api/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -13,17 +23,16 @@
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
-
+---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -38,42 +47,129 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-# kubernetes-dashboard-certs
apiVersion: v1
-kind: Secret
+kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/rbac/web/serviceaccount.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+# Source: kubernetes-dashboard/templates/secrets/csrf.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
apiVersion: v1
kind: Secret
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
name: kubernetes-dashboard-csrf
-type: Opaque
+data:
+ private.key: "RytUS3ZzYlRyZldDUUZkc1RHWWtKREZuV25TUnZUbXJHVDZiRitrVnZzeXB2b1VlZmFxM0l6WmlrWCs5YWFjVmF0alJITHhRNklpOU9SejlUYXZoZzVZQXJkNWdta2MwUmY0Uk5yWXRWRFRNZnp4K2tZdmx6WTRNZ0ZiTFZ1UUpxbkRyWjhNT2ZRTGdQWjgyRGdxYmp5b1FvOWtSNVhCY3phZlc3UnpVdEM0bUF4c1FreDRJUVRQRTdHM1EzVkQ3aUtmb3lYNitFaFhxcGNqeTVnN1ZEYk83aDhPcW9XUXdUc3RBZFJYNTkwN1RLQ3UxWVRENDJOOStQRGVRU3hYNE05c0MwK203OGpMaEg5QlJCcW9McG1ZZWdYbjc0R1hYMkZZWkhHVEd3OUhuQ0JWcnJGNXU0U2xzcWlaU3l2UUNlQjgvRTBpMlJ3bFo3VURPRkcvSjFBPT0="
+# Source: kubernetes-dashboard/templates/config/gateway.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
apiVersion: v1
-kind: Secret
+kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kong-dbless-config
+data:
+ kong.yml: |
+ _format_version: "3.0"
+ services:
+ - name: auth
+ host: kubernetes-dashboard-auth
+ port: 8000
+ protocol: http
+ routes:
+ - name: authLogin
+ paths:
+ - /api/v1/login
+ strip_path: false
+ - name: authCsrf
+ paths:
+ - /api/v1/csrftoken/login
+ strip_path: false
+ - name: authMe
+ paths:
+ - /api/v1/me
+ strip_path: false
+ - name: api
+ host: kubernetes-dashboard-api
+ port: 8000
+ protocol: http
+ routes:
+ - name: api
+ paths:
+ - /api
+ strip_path: false
+ - name: metrics
+ paths:
+ - /metrics
+ strip_path: false
+ - name: web
+ host: kubernetes-dashboard-web
+ port: 8000
+ protocol: http
+ routes:
+ - name: root
+ paths:
+ - /
+ strip_path: false
+# Source: kubernetes-dashboard/templates/config/settings.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -92,14 +188,12 @@
kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web-settings
data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrole.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -117,18 +211,17 @@
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
rules:
# Allow Metrics Scraper to get metrics from the Metrics server
- apiGroups: ["metrics.k8s.io"]
resources: ["pods", "nodes"]
verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -146,21 +239,20 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
- name: kubernetes-dashboard-metrics
+ name: kubernetes-dashboard-metrics-scraper
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/role.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -175,36 +267,50 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-apiVersion: rbac.authorization.k8s.io/v1
kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
+ # Allow Dashboard API to get metrics from metrics-scraper.
- apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
+ resources: ["services/proxy"]
+ resourceNames: ["kubernetes-dashboard-metrics-scraper", "http:kubernetes-dashboard-metrics-scraper"]
+ verbs: ["get"]
+# Source: kubernetes-dashboard/templates/rbac/web/role.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+rules:
+ # Allow Dashboard Web to get and update 'kubernetes-dashboard-settings' config map.
- apiGroups: [""]
resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
+ resourceNames: ["kubernetes-dashboard-web-settings"]
verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/rolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -222,21 +328,98 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-api
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/web/rolebinding.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: kubernetes-dashboard-web
+subjects:
+ - kind: ServiceAccount
+ name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-manager.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-manager
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+spec:
+ type: NodePort
+ ports:
+ - name: kong-manager
+ port: 8002
+ targetPort: 8002
+ protocol: TCP
+ - name: kong-manager-tls
+ port: 8445
+ targetPort: 8445
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-proxy.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-proxy
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ enable-metrics: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: kong-proxy-tls
+ port: 443
+ targetPort: 8443
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+# Source: kubernetes-dashboard/templates/services/api.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -251,28 +434,58 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ name: kubernetes-dashboard-api
+spec:
+ ports:
+ - name: api
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/services/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
kind: Service
+apiVersion: v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ name: kubernetes-dashboard-auth
spec:
- type: ClusterIP
ports:
- - port: 443
- targetPort: https
- name: https
+ - name: auth
+ port: 8000
selector:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+# Source: kubernetes-dashboard/templates/services/metrics-scraper.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -287,109 +500,644 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ ports:
+ - port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/services/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ name: kubernetes-dashboard-web
+spec:
+ ports:
+ - name: web
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
- name: kubernetes-dashboard
- annotations:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ template:
+ metadata:
+ annotations:
+ kuma.io/service-account-token-volume: kubernetes-dashboard-kong-token
+ kuma.io/gateway: "enabled"
+ traffic.sidecar.istio.io/includeInboundPorts: ""
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+ app: kubernetes-dashboard-kong
+ version: "3.6"
+ spec:
+ serviceAccountName: kubernetes-dashboard-kong
+ automountServiceAccountToken: false
+ initContainers:
+ - name: clear-stale-pid
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ resources: {}
+ command:
+ - "rm"
+ - "-vrf"
+ - "$KONG_PREFIX/pids"
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ containers:
+ - name: "proxy"
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ - name: KONG_NGINX_DAEMON
+ value: "off"
+ lifecycle:
+ preStop:
+ exec:
+ command:
+ - kong
+ - quit
+ - --wait=15
+ ports:
+ - name: proxy-tls
+ containerPort: 8443
+ protocol: TCP
+ - name: status
+ containerPort: 8100
+ protocol: TCP
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ readinessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status/ready
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ livenessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources: {}
+ securityContext: {}
+ terminationGracePeriodSeconds: 30
+ volumes:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ emptyDir:
+ sizeLimit: 256Mi
+ - name: kubernetes-dashboard-kong-tmp
+ emptyDir:
+ sizeLimit: 1Gi
+ - name: kubernetes-dashboard-kong-token
+ projected:
+ sources:
+ - serviceAccountToken:
+ expirationSeconds: 3607
+ path: token
+ - configMap:
+ items:
+ - key: ca.crt
+ path: ca.crt
+ name: kube-root-ca.crt
+ - downwardAPI:
+ items:
+ - fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ path: namespace
+ - name: kong-custom-dbless-config-volume
+ configMap:
+ name: kong-dbless-config
+# Source: kubernetes-dashboard/templates/deployments/api.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ name: kubernetes-dashboard-api
spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
+ replicas: 3
+ revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
template:
metadata:
- annotations:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ rollme: "ghRiy"
spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
+ - name: kubernetes-dashboard-api
+ image: "docker.io/kubernetesui/dashboard-api:1.2.0"
imagePullPolicy: IfNotPresent
args:
- --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
+ - --metrics-scraper-service-name=kubernetes-dashboard-metrics-scraper
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
ports:
- - name: https
- containerPort: 8443
+ - containerPort: 8000
+ name: api
protocol: TCP
volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- mountPath: /tmp
name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
resources:
limits:
- cpu: 2
- memory: 200Mi
+ cpu: 250m
+ memory: 400Mi
requests:
cpu: 100m
memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/deployments/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ name: kubernetes-dashboard-auth
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ rollme: "SZowN"
+ spec:
+ containers:
+ - name: kubernetes-dashboard-auth
+ image: "docker.io/kubernetesui/dashboard-auth:1.1.1"
+ imagePullPolicy: IfNotPresent
+ args:
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
+ ports:
+ - containerPort: 8000
+ name: auth
+ protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+# Source: kubernetes-dashboard/templates/deployments/metrics-scraper.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-metrics-scraper
+ image: "docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1"
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8000
protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
livenessProbe:
httpGet:
- scheme: HTTP
path: /
port: 8000
+ scheme: HTTP
initialDelaySeconds: 30
timeoutSeconds: 30
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/deployments/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ name: kubernetes-dashboard-web
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-web
+ image: "docker.io/kubernetesui/dashboard-web:1.2.2"
+ imagePullPolicy: IfNotPresent
+ args:
+ - --namespace=default
+ - --settings-config-map-name=kubernetes-dashboard-web-settings
+ ports:
+ - containerPort: 8000
+ name: web
+ protocol: TCP
volumeMounts:
- mountPath: /tmp
name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-web
---
--- |
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
fd55cd2 to
88eb342
Compare
|
Path: @@ -1,5 +1,15 @@
---
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
+# Source: kubernetes-dashboard/charts/kong/templates/service-account.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+# Source: kubernetes-dashboard/templates/rbac/api/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -13,17 +23,16 @@
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
-
+---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -38,42 +47,129 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-# kubernetes-dashboard-certs
apiVersion: v1
-kind: Secret
+kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/rbac/web/serviceaccount.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+# Source: kubernetes-dashboard/templates/secrets/csrf.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
apiVersion: v1
kind: Secret
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
name: kubernetes-dashboard-csrf
-type: Opaque
+data:
+ private.key: "ZGM3Q2JkdUlwTzRaWHpPejZ1cXlxejd4dHBncmU1S1BTamhuSXpkQ1JlQWdtaDRGV1d3ejRlVVFNV1l3SzhXT1IzdWdwVGxnK2drT1pnZTZMbkQ4czRLRVFvMGY3NnRrSUFNU2FEdUI1WmY2T3Z6UDBabFJBYi9aYzE5YXpyTjEyK1UrWXFyU2FhZ0dOOVBCYXF5UkZFM2VNMDJYYkEwdnp1dVRDV0NaNEpJUDUrRytaUXFUTEtVSWdQSS9oNWFxVEpEVzRFNlJSRDNNb3o1Q2ZpT3NMcEtuRFFBeFdzbWNqN3JmTTlreVNJUVFnR2d5b1ZhSDlYMC9IUmRBSXV0TUdGUzhhN0NtcnpIS3BqWHkzQ2xUV3F4ckFrMXhWVXZFVkpoUzE5RjA3T1I5dFFycDAxSUE5WFJzelYyOGRPbTRNN3JxbnZYMEJ1dXgxbG53T3hNMFFnPT0="
+# Source: kubernetes-dashboard/templates/config/gateway.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
apiVersion: v1
-kind: Secret
+kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kong-dbless-config
+data:
+ kong.yml: |
+ _format_version: "3.0"
+ services:
+ - name: auth
+ host: kubernetes-dashboard-auth
+ port: 8000
+ protocol: http
+ routes:
+ - name: authLogin
+ paths:
+ - /api/v1/login
+ strip_path: false
+ - name: authCsrf
+ paths:
+ - /api/v1/csrftoken/login
+ strip_path: false
+ - name: authMe
+ paths:
+ - /api/v1/me
+ strip_path: false
+ - name: api
+ host: kubernetes-dashboard-api
+ port: 8000
+ protocol: http
+ routes:
+ - name: api
+ paths:
+ - /api
+ strip_path: false
+ - name: metrics
+ paths:
+ - /metrics
+ strip_path: false
+ - name: web
+ host: kubernetes-dashboard-web
+ port: 8000
+ protocol: http
+ routes:
+ - name: root
+ paths:
+ - /
+ strip_path: false
+# Source: kubernetes-dashboard/templates/config/settings.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -92,14 +188,12 @@
kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web-settings
data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrole.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -117,18 +211,17 @@
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
rules:
# Allow Metrics Scraper to get metrics from the Metrics server
- apiGroups: ["metrics.k8s.io"]
resources: ["pods", "nodes"]
verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -146,21 +239,20 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
- name: kubernetes-dashboard-metrics
+ name: kubernetes-dashboard-metrics-scraper
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/role.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -175,36 +267,50 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-apiVersion: rbac.authorization.k8s.io/v1
kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
+ # Allow Dashboard API to get metrics from metrics-scraper.
- apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
+ resources: ["services/proxy"]
+ resourceNames: ["kubernetes-dashboard-metrics-scraper", "http:kubernetes-dashboard-metrics-scraper"]
+ verbs: ["get"]
+# Source: kubernetes-dashboard/templates/rbac/web/role.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+rules:
+ # Allow Dashboard Web to get and update 'kubernetes-dashboard-settings' config map.
- apiGroups: [""]
resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
+ resourceNames: ["kubernetes-dashboard-web-settings"]
verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/rolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -222,21 +328,98 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-api
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/web/rolebinding.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: kubernetes-dashboard-web
+subjects:
+ - kind: ServiceAccount
+ name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-manager.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-manager
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+spec:
+ type: NodePort
+ ports:
+ - name: kong-manager
+ port: 8002
+ targetPort: 8002
+ protocol: TCP
+ - name: kong-manager-tls
+ port: 8445
+ targetPort: 8445
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-proxy.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-proxy
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ enable-metrics: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: kong-proxy-tls
+ port: 443
+ targetPort: 8443
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+# Source: kubernetes-dashboard/templates/services/api.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -251,28 +434,58 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ name: kubernetes-dashboard-api
+spec:
+ ports:
+ - name: api
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/services/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
kind: Service
+apiVersion: v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ name: kubernetes-dashboard-auth
spec:
- type: ClusterIP
ports:
- - port: 443
- targetPort: https
- name: https
+ - name: auth
+ port: 8000
selector:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+# Source: kubernetes-dashboard/templates/services/metrics-scraper.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -287,109 +500,644 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ ports:
+ - port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/services/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ name: kubernetes-dashboard-web
+spec:
+ ports:
+ - name: web
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
- name: kubernetes-dashboard
- annotations:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ template:
+ metadata:
+ annotations:
+ kuma.io/service-account-token-volume: kubernetes-dashboard-kong-token
+ kuma.io/gateway: "enabled"
+ traffic.sidecar.istio.io/includeInboundPorts: ""
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+ app: kubernetes-dashboard-kong
+ version: "3.6"
+ spec:
+ serviceAccountName: kubernetes-dashboard-kong
+ automountServiceAccountToken: false
+ initContainers:
+ - name: clear-stale-pid
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ resources: {}
+ command:
+ - "rm"
+ - "-vrf"
+ - "$KONG_PREFIX/pids"
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ containers:
+ - name: "proxy"
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "LAST,A,SRV,CNAME"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ - name: KONG_NGINX_DAEMON
+ value: "off"
+ lifecycle:
+ preStop:
+ exec:
+ command:
+ - kong
+ - quit
+ - --wait=15
+ ports:
+ - name: proxy-tls
+ containerPort: 8443
+ protocol: TCP
+ - name: status
+ containerPort: 8100
+ protocol: TCP
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ readinessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status/ready
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ livenessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources: {}
+ securityContext: {}
+ terminationGracePeriodSeconds: 30
+ volumes:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ emptyDir:
+ sizeLimit: 256Mi
+ - name: kubernetes-dashboard-kong-tmp
+ emptyDir:
+ sizeLimit: 1Gi
+ - name: kubernetes-dashboard-kong-token
+ projected:
+ sources:
+ - serviceAccountToken:
+ expirationSeconds: 3607
+ path: token
+ - configMap:
+ items:
+ - key: ca.crt
+ path: ca.crt
+ name: kube-root-ca.crt
+ - downwardAPI:
+ items:
+ - fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ path: namespace
+ - name: kong-custom-dbless-config-volume
+ configMap:
+ name: kong-dbless-config
+# Source: kubernetes-dashboard/templates/deployments/api.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ name: kubernetes-dashboard-api
spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
+ replicas: 3
+ revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
template:
metadata:
- annotations:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ rollme: "oEEQa"
spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
+ - name: kubernetes-dashboard-api
+ image: "docker.io/kubernetesui/dashboard-api:1.3.0"
imagePullPolicy: IfNotPresent
args:
- --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
+ - --metrics-scraper-service-name=kubernetes-dashboard-metrics-scraper
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
ports:
- - name: https
- containerPort: 8443
+ - containerPort: 8000
+ name: api
protocol: TCP
volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- mountPath: /tmp
name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
resources:
limits:
- cpu: 2
- memory: 200Mi
+ cpu: 250m
+ memory: 400Mi
requests:
cpu: 100m
memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/deployments/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ name: kubernetes-dashboard-auth
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ rollme: "RvuWH"
+ spec:
+ containers:
+ - name: kubernetes-dashboard-auth
+ image: "docker.io/kubernetesui/dashboard-auth:1.1.1"
+ imagePullPolicy: IfNotPresent
+ args:
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
+ ports:
+ - containerPort: 8000
+ name: auth
+ protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+# Source: kubernetes-dashboard/templates/deployments/metrics-scraper.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-metrics-scraper
+ image: "docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1"
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8000
protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
livenessProbe:
httpGet:
- scheme: HTTP
path: /
port: 8000
+ scheme: HTTP
initialDelaySeconds: 30
timeoutSeconds: 30
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/deployments/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ name: kubernetes-dashboard-web
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-web
+ image: "docker.io/kubernetesui/dashboard-web:1.2.2"
+ imagePullPolicy: IfNotPresent
+ args:
+ - --namespace=default
+ - --settings-config-map-name=kubernetes-dashboard-web-settings
+ ports:
+ - containerPort: 8000
+ name: web
+ protocol: TCP
volumeMounts:
- mountPath: /tmp
name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-web
---
--- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
88eb342 to
54a5b29
Compare
renovate
bot
changed the title
|
Path: @@ -1,5 +1,15 @@
---
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
+# Source: kubernetes-dashboard/charts/kong/templates/service-account.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+# Source: kubernetes-dashboard/templates/rbac/api/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -13,17 +23,16 @@
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
-
+---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/serviceaccount.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -38,42 +47,129 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-# kubernetes-dashboard-certs
apiVersion: v1
-kind: Secret
+kind: ServiceAccount
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/rbac/web/serviceaccount.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+# Source: kubernetes-dashboard/templates/secrets/csrf.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
apiVersion: v1
kind: Secret
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
name: kubernetes-dashboard-csrf
-type: Opaque
+data:
+ private.key: "eW4zeHY4V3pnOCtCYTQ5MTVqd1Q4bU5lNGMwc1NMbWZQd1ZZRFhtRW1NSmhIcDBqbUVFRlJVeGJ6TGFsWGJyQWc5MS9DS2RabEFJUXdQbFZxU2hGYWY5T2Z0WVB4dkszQTc0R2prbTdBU0VmdXdiSFpROHgyWVdQYnRYdlpSdk9tc0lKcXBwUFNjWmhtYmlmTEo0VnpRRlpYNkdpRXg2MU5ESmFIL0UxZnlLQVJoZVRjQlRpUlZ6SUMzRlo2MlBiRjZQaHE3RlEvNFp6ODNQcDBPQkkrcnFIUitlQm1MU0xDaFpjMEtKSy9pYzUvV2MrSzV5VE15VzQ2VWY3RmVFSHVtSlJiUzg2d2tWRTFjYjFhRnRhNHFPVTJua2lBblJ1RWJtVUJ5SUIxaVhUR1hENWFKWWc2bXN1bFlSV3pIMlk3cmtOTmlNMHh0UnhJc1c5Y2t5ZkdRPT0="
+# Source: kubernetes-dashboard/templates/config/gateway.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
---
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
apiVersion: v1
-kind: Secret
+kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kong-dbless-config
+data:
+ kong.yml: |
+ _format_version: "3.0"
+ services:
+ - name: auth
+ host: kubernetes-dashboard-auth
+ port: 8000
+ protocol: http
+ routes:
+ - name: authLogin
+ paths:
+ - /api/v1/login
+ strip_path: false
+ - name: authCsrf
+ paths:
+ - /api/v1/csrftoken/login
+ strip_path: false
+ - name: authMe
+ paths:
+ - /api/v1/me
+ strip_path: false
+ - name: api
+ host: kubernetes-dashboard-api
+ port: 8000
+ protocol: http
+ routes:
+ - name: api
+ paths:
+ - /api
+ strip_path: false
+ - name: metrics
+ paths:
+ - /metrics
+ strip_path: false
+ - name: web
+ host: kubernetes-dashboard-web
+ port: 8000
+ protocol: http
+ routes:
+ - name: root
+ paths:
+ - /
+ strip_path: false
+# Source: kubernetes-dashboard/templates/config/settings.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -92,14 +188,12 @@
kind: ConfigMap
metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web-settings
data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrole.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -117,18 +211,17 @@
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
rules:
# Allow Metrics Scraper to get metrics from the Metrics server
- apiGroups: ["metrics.k8s.io"]
resources: ["pods", "nodes"]
verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
+# Source: kubernetes-dashboard/templates/rbac/metrics-scraper/clusterrolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -146,21 +239,20 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: "kubernetes-dashboard-metrics"
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
- name: kubernetes-dashboard-metrics
+ name: kubernetes-dashboard-metrics-scraper
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-metrics-scraper
namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/role.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -175,36 +267,50 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
-apiVersion: rbac.authorization.k8s.io/v1
kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
+ # Allow Dashboard API to get metrics from metrics-scraper.
- apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
+ resources: ["services/proxy"]
+ resourceNames: ["kubernetes-dashboard-metrics-scraper", "http:kubernetes-dashboard-metrics-scraper"]
+ verbs: ["get"]
+# Source: kubernetes-dashboard/templates/rbac/web/role.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+rules:
+ # Allow Dashboard Web to get and update 'kubernetes-dashboard-settings' config map.
- apiGroups: [""]
resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
+ resourceNames: ["kubernetes-dashboard-web-settings"]
verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
+# Source: kubernetes-dashboard/templates/rbac/api/rolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -222,21 +328,19 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
- name: kubernetes-dashboard
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-api
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-api
subjects:
- kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
+ name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/rbac/web/rolebinding.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -251,28 +355,169 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ name: kubernetes-dashboard-web
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: kubernetes-dashboard-web
+subjects:
+ - kind: ServiceAccount
+ name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-manager.yaml
apiVersion: v1
kind: Service
metadata:
- name: kubernetes-dashboard
+ name: kubernetes-dashboard-kong-manager
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+spec:
+ type: NodePort
+ ports:
+ - name: kong-manager
+ port: 8002
+ targetPort: 8002
+ protocol: TCP
+ - name: kong-manager-tls
+ port: 8445
+ targetPort: 8445
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+---
+# Source: kubernetes-dashboard/charts/kong/templates/service-kong-proxy.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: kubernetes-dashboard-kong-proxy
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ enable-metrics: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: kong-proxy-tls
+ port: 443
+ targetPort: 8443
+ protocol: TCP
+ selector:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+# Source: kubernetes-dashboard/templates/services/api.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ name: kubernetes-dashboard-api
+spec:
+ ports:
+ - name: api
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/services/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ name: kubernetes-dashboard-auth
+spec:
+ ports:
+ - name: auth
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+# Source: kubernetes-dashboard/templates/services/metrics-scraper.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ name: kubernetes-dashboard-metrics-scraper
spec:
- type: ClusterIP
ports:
- - port: 443
- targetPort: https
- name: https
+ - port: 8000
selector:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/services/web.yaml
# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -287,109 +532,612 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
+kind: Service
+apiVersion: v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ name: kubernetes-dashboard-web
+spec:
+ ports:
+ - name: web
+ port: 8000
+ selector:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+---
+# Source: kubernetes-dashboard/charts/kong/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
- name: kubernetes-dashboard
- annotations:
+ name: kubernetes-dashboard-kong
+ namespace: default
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/component: app
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ template:
+ metadata:
+ annotations:
+ kuma.io/service-account-token-volume: kubernetes-dashboard-kong-token
+ kuma.io/gateway: "enabled"
+ traffic.sidecar.istio.io/includeInboundPorts: ""
+ labels:
+ app.kubernetes.io/name: kong
+ app.kubernetes.io/instance: "kubernetes-dashboard"
+ app.kubernetes.io/managed-by: "Helm"
+ app.kubernetes.io/component: app
+ app: kubernetes-dashboard-kong
+ version: "3.6"
+ spec:
+ serviceAccountName: kubernetes-dashboard-kong
+ automountServiceAccountToken: false
+ initContainers:
+ - name: clear-stale-pid
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ resources: {}
+ command:
+ - "rm"
+ - "-vrf"
+ - "$KONG_PREFIX/pids"
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "A,CNAME,LAST,SRV"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ containers:
+ - name: "proxy"
+ image: kong:3.6
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 1000
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: KONG_ADMIN_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_GUI_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_ADMIN_GUI_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ADMIN_LISTEN
+ value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl"
+ - name: KONG_CLUSTER_LISTEN
+ value: "off"
+ - name: KONG_DATABASE
+ value: "off"
+ - name: KONG_DECLARATIVE_CONFIG
+ value: "/kong_dbless/kong.yml"
+ - name: KONG_DNS_ORDER
+ value: "A,CNAME,LAST,SRV"
+ - name: KONG_LUA_PACKAGE_PATH
+ value: "/opt/?.lua;/opt/?/init.lua;;"
+ - name: KONG_NGINX_WORKER_PROCESSES
+ value: "2"
+ - name: KONG_PORTAL_API_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PORTAL_API_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PORT_MAPS
+ value: "443:8443"
+ - name: KONG_PREFIX
+ value: "/kong_prefix/"
+ - name: KONG_PROXY_ACCESS_LOG
+ value: "/dev/stdout"
+ - name: KONG_PROXY_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_PROXY_LISTEN
+ value: "0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl"
+ - name: KONG_PROXY_STREAM_ACCESS_LOG
+ value: "/dev/stdout basic"
+ - name: KONG_PROXY_STREAM_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_ROUTER_FLAVOR
+ value: "traditional"
+ - name: KONG_STATUS_ACCESS_LOG
+ value: "off"
+ - name: KONG_STATUS_ERROR_LOG
+ value: "/dev/stderr"
+ - name: KONG_STATUS_LISTEN
+ value: "0.0.0.0:8100, [::]:8100"
+ - name: KONG_STREAM_LISTEN
+ value: "off"
+ - name: KONG_NGINX_DAEMON
+ value: "off"
+ lifecycle:
+ preStop:
+ exec:
+ command:
+ - kong
+ - quit
+ - --wait=15
+ ports:
+ - name: proxy-tls
+ containerPort: 8443
+ protocol: TCP
+ - name: status
+ containerPort: 8100
+ protocol: TCP
+ volumeMounts:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ mountPath: /kong_prefix/
+ - name: kubernetes-dashboard-kong-tmp
+ mountPath: /tmp
+ - name: kong-custom-dbless-config-volume
+ mountPath: /kong_dbless/
+ readinessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status/ready
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ livenessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /status
+ port: status
+ scheme: HTTP
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources: {}
+ securityContext: {}
+ terminationGracePeriodSeconds: 30
+ volumes:
+ - name: kubernetes-dashboard-kong-prefix-dir
+ emptyDir:
+ sizeLimit: 256Mi
+ - name: kubernetes-dashboard-kong-tmp
+ emptyDir:
+ sizeLimit: 1Gi
+ - name: kubernetes-dashboard-kong-token
+ projected:
+ sources:
+ - serviceAccountToken:
+ expirationSeconds: 3607
+ path: token
+ - configMap:
+ items:
+ - key: ca.crt
+ path: ca.crt
+ name: kube-root-ca.crt
+ - downwardAPI:
+ items:
+ - fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ path: namespace
+ - name: kong-custom-dbless-config-volume
+ configMap:
+ name: kong-dbless-config
+# Source: kubernetes-dashboard/templates/deployments/api.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ name: kubernetes-dashboard-api
spec:
replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
+ revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
template:
metadata:
- annotations:
labels:
- app.kubernetes.io/name: kubernetes-dashboard
app.kubernetes.io/instance: kubernetes-dashboard
app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-api
+ app.kubernetes.io/component: api
+ annotations:
+ rollme: "sLRgy"
spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
+ - name: kubernetes-dashboard-api
+ image: "docker.io/kubernetesui/dashboard-api:1.4.0"
imagePullPolicy: IfNotPresent
args:
- --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
+ - --metrics-scraper-service-name=kubernetes-dashboard-metrics-scraper
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
ports:
- - name: https
- containerPort: 8443
+ - containerPort: 8000
+ name: api
protocol: TCP
volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- mountPath: /tmp
name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
resources:
limits:
- cpu: 2
- memory: 200Mi
+ cpu: 250m
+ memory: 400Mi
requests:
cpu: 100m
memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-api
+# Source: kubernetes-dashboard/templates/deployments/auth.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ name: kubernetes-dashboard-auth
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-auth
+ app.kubernetes.io/component: auth
+ annotations:
+ rollme: "X6spM"
+ spec:
+ containers:
+ - name: kubernetes-dashboard-auth
+ image: "docker.io/kubernetesui/dashboard-auth:1.1.2"
+ imagePullPolicy: IfNotPresent
+ args:
+ env:
+ - name: CSRF_KEY
+ valueFrom:
+ secretKeyRef:
+ name: kubernetes-dashboard-csrf
+ key: private.key
+ ports:
+ - containerPort: 8000
+ name: auth
+ protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+# Source: kubernetes-dashboard/templates/deployments/metrics-scraper.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ name: kubernetes-dashboard-metrics-scraper
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+ app.kubernetes.io/component: metrics-scraper
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-metrics-scraper
+ image: "docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1"
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8000
protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp-volume
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 2001
+ runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
livenessProbe:
httpGet:
- scheme: HTTP
path: /
port: 8000
+ scheme: HTTP
initialDelaySeconds: 30
timeoutSeconds: 30
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-metrics-scraper
+# Source: kubernetes-dashboard/templates/deployments/web.yaml
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ name: kubernetes-dashboard-web
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: kubernetes-dashboard
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/part-of: kubernetes-dashboard
+ app.kubernetes.io/name: kubernetes-dashboard-web
+ app.kubernetes.io/component: web
+ annotations:
+ spec:
+ containers:
+ - name: kubernetes-dashboard-web
+ image: "docker.io/kubernetesui/dashboard-web:1.2.3"
+ imagePullPolicy: IfNotPresent
+ args:
+ - --namespace=default
+ - --settings-config-map-name=kubernetes-dashboard-web-settings
+ ports:
+ - containerPort: 8000
+ name: web
+ protocol: TCP
volumeMounts:
- mountPath: /tmp
name: tmp-volume
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
readOnlyRootFilesystem: true
runAsGroup: 2001
runAsUser: 1001
+ resources:
+ limits:
+ cpu: 250m
+ memory: 400Mi
+ requests:
+ cpu: 100m
+ memory: 200Mi
+ securityContext:
+ runAsNonRoot: true
+ seccompProfile:
+ type: RuntimeDefault
volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
+ - emptyDir: {}
+ name: tmp-volume
+ serviceAccountName: kubernetes-dashboard-web
---
--- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
54a5b29 to
87aa10d
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
87aa10d to
7b89ac2
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
7b89ac2 to
7708906
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
cf3a495 to
e01ddf0
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
e01ddf0 to
f8528d0
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
f8528d0 to
d2a48cb
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
d2a48cb to
6a492e8
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
6a492e8 to
d09a7f1
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
d09a7f1 to
d4c191e
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
d4c191e to
dc8899c
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
dc8899c to
ec1511e
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
| datasource | package | from | to | | ---------- | -------------------- | ----- | ------ | | helm | kubernetes-dashboard | 5.8.0 | 7.10.4 |
renovate
bot
force-pushed
the
renovate/kubernetes-dashboard-7.x
branch
from
ec1511e to
6ca568b
Compare
renovate
bot
changed the title
|
Path: @@ -1,401 +1 @@
----
-# Source: kubernetes-dashboard/templates/serviceaccount.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/secret.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-# kubernetes-dashboard-certs
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-certs
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-csrf
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-csrf
-type: Opaque
----
-# Source: kubernetes-dashboard/templates/secret.yaml
-# kubernetes-dashboard-key-holder
-apiVersion: v1
-kind: Secret
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- name: kubernetes-dashboard-key-holder
-type: Opaque
-# Source: kubernetes-dashboard/templates/configmap.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
- name: kubernetes-dashboard-settings
-data:
- _global: "{\"clusterName\":\"${SECRET_DOMAIN}\",\"disableAccessDeniedNotifications\":false,\"itemsPerPage\":100,\"logsAutoRefreshTimeInterval\":5,\"resourceAutoRefreshTimeInterval\":5}"
-# Source: kubernetes-dashboard/templates/clusterrole-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Metrics Scraper to get metrics from the Metrics server
- - apiGroups: ["metrics.k8s.io"]
- resources: ["pods", "nodes"]
- verbs: ["get", "list", "watch"]
-# Source: kubernetes-dashboard/templates/clusterrolebinding-metrics.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: "kubernetes-dashboard-metrics"
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubernetes-dashboard-metrics
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/role.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-rules:
- # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
- - apiGroups: [""]
- resources: ["secrets"]
- resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
- verbs: ["get", "update", "delete"]
- # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
- - apiGroups: [""]
- resources: ["configmaps"]
- resourceNames: ["kubernetes-dashboard-settings"]
- verbs: ["get", "update"]
- # Allow Dashboard to get metrics.
- - apiGroups: [""]
- resources: ["services"]
- resourceNames: ["heapster", "dashboard-metrics-scraper"]
- verbs: ["proxy"]
- - apiGroups: [""]
- resources: ["services/proxy"]
- resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
- verbs: ["get"]
-# Source: kubernetes-dashboard/templates/rolebinding.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- annotations:
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubernetes-dashboard
-subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: default
-# Source: kubernetes-dashboard/templates/service.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: v1
-kind: Service
-metadata:
- name: kubernetes-dashboard
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- kubernetes.io/cluster-service: "true"
- annotations:
-spec:
- type: ClusterIP
- ports:
- - port: 443
- targetPort: https
- name: https
- selector:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
-# Source: kubernetes-dashboard/templates/deployment.yaml
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kubernetes-dashboard
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
-spec:
- replicas: 1
- strategy:
- rollingUpdate:
- maxSurge: 0
- maxUnavailable: 1
- type: RollingUpdate
- selector:
- matchLabels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/component: kubernetes-dashboard
- template:
- metadata:
- annotations:
- labels:
- app.kubernetes.io/name: kubernetes-dashboard
- app.kubernetes.io/instance: kubernetes-dashboard
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: kubernetes-dashboard
- spec:
- securityContext:
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubernetes-dashboard
- containers:
- - name: kubernetes-dashboard
- image: "kubernetesui/dashboard:v2.6.1"
- imagePullPolicy: IfNotPresent
- args:
- - --namespace=default
- - --auto-generate-certificates
- - --sidecar-host=http://127.0.0.1:8000
- ports:
- - name: https
- containerPort: 8443
- protocol: TCP
- volumeMounts:
- - name: kubernetes-dashboard-certs
- mountPath: /certs
- # Create on-disk volume to store exec logs
- - mountPath: /tmp
- name: tmp-volume
- livenessProbe:
- httpGet:
- scheme: HTTPS
- path: /
- port: 8443
- initialDelaySeconds: 30
- timeoutSeconds: 30
- resources:
- limits:
- cpu: 2
- memory: 200Mi
- requests:
- cpu: 100m
- memory: 200Mi
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- - name: dashboard-metrics-scraper
- image: "kubernetesui/metrics-scraper:v1.0.8"
- imagePullPolicy: IfNotPresent
- ports:
- - containerPort: 8000
- protocol: TCP
- livenessProbe:
- httpGet:
- scheme: HTTP
- path: /
- port: 8000
- initialDelaySeconds: 30
- timeoutSeconds: 30
- volumeMounts:
- - mountPath: /tmp
- name: tmp-volume
- securityContext:
- allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsGroup: 2001
- runAsUser: 1001
- volumes:
- - name: kubernetes-dashboard-certs
- secret:
- secretName: kubernetes-dashboard-certs
- - name: tmp-volume
- emptyDir: {}
----
-
----
-
----
-
----
-
----
-
----
-
---- |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.8.0->7.10.4Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
kubernetes/dashboard (kubernetes-dashboard)
v7.10.4Compare Source
What's Changed
New Contributors
Full Changelog: kubernetes/dashboard@kubernetes-dashboard-7.10.3...kubernetes-dashboard-7.10.4
Installation
Compatibility
✓Fully supported version range.?Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.Images
v7.10.3Compare Source
What's Changed
Full Changelog: kubernetes/dashboard@kubernetes-dashboard-7.10.2...kubernetes-dashboard-7.10.3
Installation
Compatibility
✓Fully supported version range.?Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.Images
v7.10.2Compare Source
What's Changed
New Contributors
Full Changelog: kubernetes/dashboard@kubernetes-dashboard-7.10.1...kubernetes-dashboard-7.10.2
Installation
Compatibility
✓Fully supported version range.?Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.Images
v7.10.1Compare Source
What's Changed
New Contributors
Full Changelog: kubernetes/dashboard@kubernetes-dashboard-7.10.0...kubernetes-dashboard-7.10.1
Installation
Compatibility
✓Fully supported version range.?Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.Images
v7.10.0Compare Source
What's Changed
Dependency updates
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.