add dashboard

helm/dashboard/Chart.yaml

@@ -0,0 +1,14 @@
+# Chart.yaml
+apiVersion: v2
+name: kubernetes-dashboard
+description: A Helm chart for deploying the Kubernetes Dashboard.
+type: application
+
+version: 1.0.0
+
+appVersion: "v2.7.0"
+
+keywords:
+  - kubernetes
+  - dashboard
+  - ui

helm/dashboard/values.yaml

@@ -0,0 +1,76 @@
+# values.yaml
+
+# -- Image settings for the Kubernetes Dashboard
+image:
+  repository: kubernetesui/dashboard
+  tag: "v2.7.0"
+  pullPolicy: IfNotPresent
+
+# -- Image settings for the metrics scraper
+metricsScraper:
+  repository: kubernetesui/metrics-scraper
+  tag: "v1.0.8"
+  pullPolicy: IfNotPresent
+
+# -- Kubernetes Service configuration
+service:
+  type: ClusterIP
+  port: 443
+  targetPort: 8443
+  # For NodePort or LoadBalancer, you can specify nodePort or loadBalancerIP
+  # nodePort: 32000
+  # loadBalancerIP: "x.x.x.x"
+  annotations: {}
+  #  kubernetes.io/tls-acme: "true"
+
+# -- Resource requests and limits for the dashboard pod
+# It's recommended to set resources to avoid resource starvation.
+resources:
+  limits:
+    cpu: 100m
+    memory: 200Mi
+  requests:
+    cpu: 50m
+    memory: 100Mi
+
+# -- Ingress configuration
+# Enable this if you want to expose the dashboard via an Ingress controller.
+ingress:
+  enabled: false
+  # className: "nginx" # Specify your ingress class
+  annotations: {}
+    # kubernetes.io/ingress.class: nginx
+    # cert-manager.io/cluster-issuer: "letsencrypt-prod"
+  hosts:
+    - host: dashboard.local
+      paths:
+        - path: /
+          pathType: Prefix
+  tls: []
+  #  - secretName: dashboard-tls
+  #    hosts:
+  #      - dashboard.local
+
+# -- RBAC (Role-Based Access Control) settings
+# Creates a ServiceAccount and ClusterRoleBinding for the dashboard.
+rbac:
+  create: true
+  # Set to true to give the dashboard admin privileges across the cluster.
+  # WARNING: This is a security risk. Use with caution in production.
+  clusterAdminRole: false
+
+# -- Name of the ServiceAccount to use.
+# If not set and rbac.create is true, a name is generated using the fullname template
+serviceAccount:
+  name: ""
+
+# -- Security Context for the pod and container
+securityContext:
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
+  runAsUser: 1001
+  runAsGroup: 2001
+
+# -- Additional labels to apply to all resources
+extraLabels: {}
+#  app.kubernetes.io/instance: "my-dashboard"