diff --git a/helm/dashboard/ingress.yaml b/helm/dashboard/ingress.yaml index 5b8aca1..2b6bac6 100644 --- a/helm/dashboard/ingress.yaml +++ b/helm/dashboard/ingress.yaml @@ -4,15 +4,9 @@ metadata: name: kubernetes-dashboard-ingress namespace: i-dashboard annotations: - # Use this annotation if you are using the NGINX Ingress Controller nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" - # Add annotations for cert-manager if you use it for TLS - # cert-manager.io/cluster-issuer: "letsencrypt-prod" spec: - # tls: - # - hosts: - # - dashboard.your-domain.com - # secretName: dashboard-tls-cert + ingressClassName: nginx rules: - host: "dashboard.darkstars.local" http: diff --git a/helm/dashboard/service-account.yaml b/helm/dashboard/service-account.yaml new file mode 100644 index 0000000..669af68 --- /dev/null +++ b/helm/dashboard/service-account.yaml @@ -0,0 +1,33 @@ +# templates/service-account.yaml +--- +# ------------------- Dashboard Service Account ------------------- # +apiVersion: v1 +kind: ServiceAccount +metadata: + name: dashboard-admin + namespace: i-dashboard + labels: + app.kubernetes.io/name: kubernetes-dashboard + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} + +--- +# ------------------- Dashboard ClusterRoleBinding ------------------- # +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: dashboard-admin-binding + labels: + app.kubernetes.io/name: kubernetes-dashboard + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: cluster-admin +subjects: +- kind: ServiceAccount + name: dashboard-admin + namespace: i-dashboard