refactor: use multiple source for kubernetes-dashboard argo application

- store override in a separate values.yaml file
- upgrade to version 7.9.0

kubernetes-dashboard/components/kubernetes-dashboard/application.yaml

@@ -11,20 +11,19 @@ metadata:
     - resources-finalizer.argocd.argoproj.io
 spec:
   project: <PROJECT>
-  source:
+  sources:
     repoURL: 'https://kubernetes.github.io/dashboard'
-    targetRevision: 6.0.0
+    targetRevision: 7.9.0
     chart: kubernetes-dashboard
-    helm:
-      values: |
-        app:
-          ingress:
-            hosts:
-              # keep only the 'localhost' host if you only want to access Dashboard using 'kubectl port-forward ...' on:
-              # https://localhost:8443
-              # please note that the ingress itself is managed in ingress.yaml
-              - localhost
-              - kubernetes-dashboard.<DOMAIN_NAME>
+      helm:
+        valueFiles:
+          - $values/registry/clusters/<CLUSTER_NAME>/components/kubernetes-dashboard/values.yaml
+    - repoURL: <GITOPS_REPO_URL>
+      targetRevision: HEAD
+      ref: values
+    - repoURL: <GITOPS_REPO_URL>
+      path: registry/clusters/<CLUSTER_NAME>/components/kubernetes-dashboard/dependencies/
+      targetRevision: HEAD
   destination:
     name: <CLUSTER_DESTINATION>
     namespace: kubernetes-dashboard

kubernetes-dashboard/components/kubernetes-dashboard/clusterolebinding.yaml → kubernetes-dashboard/components/kubernetes-dashboard/dependencies/clusterolebinding.yaml

@@ -1,15 +1,15 @@
 ---
-kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
 metadata:
-  name: k8s-dashboard-clusterrole
+  name: dashboard-user
   annotations:
     argocd.argoproj.io/sync-wave: "0"
-subjects:
-  - kind: ServiceAccount
-    name: <CLUSTER_NAME>-kubernetes-dashboard
-    namespace: kubernetes-dashboard
 roleRef:
-  kind: ClusterRole
-  name: admin
   apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: dashboard-user
+  namespace: kubernetes-dashboard

kubernetes-dashboard/components/kubernetes-dashboard/dependencies/service-account.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: dashboard-user
+
+# to get your bearer token for auth, connect to your cluster, then run command:
+# kubectl -n kubernetes-dashboard create token dashboard-user

kubernetes-dashboard/components/kubernetes-dashboard/values.yaml

@@ -0,0 +1,14 @@
+app: 
+  ingress:
+    enabled: true
+    hosts:
+      - kubernetes-dashboard.<CLUSTER_NAME>.<DOMAIN_NAME>
+    ingressClassName: nginx
+    tls:
+      enabled: true
+      secretName: "kubernetes-dashboard-tls"
+    issuer:
+      scope: cluster
+      name: "letsencrypt-prod"
+    annotations:
+      argocd.argoproj.io/sync-wave: "2"