diff --git a/infrastructure/06-kube-dashboard/base/kube-dashboard-rolebinding.yaml b/infrastructure/06-kube-dashboard/base/kube-dashboard-rolebinding.yaml new file mode 100644 index 0000000..aa324fa --- /dev/null +++ b/infrastructure/06-kube-dashboard/base/kube-dashboard-rolebinding.yaml @@ -0,0 +1,12 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: dashboard-user +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: cluster-admin +subjects: +- kind: ServiceAccount + name: dashboard-user + namespace: kubernetes-dashboard \ No newline at end of file diff --git a/infrastructure/06-kube-dashboard/base/kube-dashboard-serviceaccount.yaml b/infrastructure/06-kube-dashboard/base/kube-dashboard-serviceaccount.yaml new file mode 100644 index 0000000..5f4adda --- /dev/null +++ b/infrastructure/06-kube-dashboard/base/kube-dashboard-serviceaccount.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: dashboard-user + namespace: kubernetes-dashboard \ No newline at end of file diff --git a/infrastructure/06-kube-dashboard/base/kube-dashboard-user-secret.yaml b/infrastructure/06-kube-dashboard/base/kube-dashboard-user-secret.yaml new file mode 100644 index 0000000..faffec2 --- /dev/null +++ b/infrastructure/06-kube-dashboard/base/kube-dashboard-user-secret.yaml @@ -0,0 +1,8 @@ +apiVersion: v1 +kind: Secret +metadata: + name: dashboard-user + namespace: kubernetes-dashboard + annotations: + kubernetes.io/service-account.name: "dashboard-user" +type: kubernetes.io/service-account-token \ No newline at end of file diff --git a/infrastructure/06-kube-dashboard/kustomization.yaml b/infrastructure/06-kube-dashboard/kustomization.yaml index 9ed9a9b..707f7f5 100644 --- a/infrastructure/06-kube-dashboard/kustomization.yaml +++ b/infrastructure/06-kube-dashboard/kustomization.yaml @@ -5,6 +5,9 @@ namespace: kubernetes-dashboard resources: - base/kube-dashboard-ui-ingress.yaml +- base/kube-dashboard-user-secret.yaml +- base/kube-dashboard-rolebinding.yaml +- base/kube-dashboard-serviceaccount.yaml - https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml patches: