add sa
This commit is contained in:
@@ -4,15 +4,9 @@ metadata:
|
|||||||
name: kubernetes-dashboard-ingress
|
name: kubernetes-dashboard-ingress
|
||||||
namespace: i-dashboard
|
namespace: i-dashboard
|
||||||
annotations:
|
annotations:
|
||||||
# Use this annotation if you are using the NGINX Ingress Controller
|
|
||||||
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
|
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
|
||||||
# Add annotations for cert-manager if you use it for TLS
|
|
||||||
# cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
||||||
spec:
|
spec:
|
||||||
# tls:
|
ingressClassName: nginx
|
||||||
# - hosts:
|
|
||||||
# - dashboard.your-domain.com
|
|
||||||
# secretName: dashboard-tls-cert
|
|
||||||
rules:
|
rules:
|
||||||
- host: "dashboard.darkstars.local"
|
- host: "dashboard.darkstars.local"
|
||||||
http:
|
http:
|
||||||
|
|||||||
33
helm/dashboard/service-account.yaml
Normal file
33
helm/dashboard/service-account.yaml
Normal file
@@ -0,0 +1,33 @@
|
|||||||
|
# templates/service-account.yaml
|
||||||
|
---
|
||||||
|
# ------------------- Dashboard Service Account ------------------- #
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: dashboard-admin
|
||||||
|
namespace: i-dashboard
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/name: kubernetes-dashboard
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
|
||||||
|
|
||||||
|
---
|
||||||
|
# ------------------- Dashboard ClusterRoleBinding ------------------- #
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: dashboard-admin-binding
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/name: kubernetes-dashboard
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: cluster-admin
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: dashboard-admin
|
||||||
|
namespace: i-dashboard
|
||||||
Reference in New Issue
Block a user