[stable/kubernetes-dashboard] #7516 Allow HTTP connection (#9011)

Signed-off-by: Michael Barrientos <mbarrien@gmail.com>
2026-08-23 22:37:45 +00:00 · 2018-12-12 08:06:54 -08:00
parent a9b0e9566c
commit 403d3bdf73
6 changed files with 42 additions and 1 deletions
@@ -1,5 +1,5 @@
 name: kubernetes-dashboard
-version: 0.9.1
+version: 0.10.0
 appVersion: 1.10.0
 description: General-purpose web UI for Kubernetes clusters
 keywords:
@@ -53,6 +53,7 @@ The following table lists the configurable parameters of the kubernetes-dashboar
 | `nodeSelector`                      | node labels for pod assignment                                                                                              | `{}`                                                                       |
 | `tolerations`                       | List of node taints to tolerate (requires Kubernetes >= 1.6)                                                                | `[]`                                                                       |
 | `affinity`                         | Affinity for pod assignment                                                                                                  | `[]`                                                                       |
+| `enableInsecureLogin`              | Serve application over HTTP without TLS                                                                                      | `false`                                                                    |
 | `service.externalPort`              | Dashboard external port                                                                                                     | 443                                                                        |
 | `service.internalPort`              | Dashboard internal port                                                                                                     | 443                                                                        |
 | `ingress.annotations`               | Specify ingress class                                                                                                       | `kubernetes.io/ingress.class: nginx`                                       |
@@ -5,15 +5,23 @@
 {{- if .Values.ingress.enabled }}
 From outside the cluster, the server URL(s) are:
 {{- range .Values.ingress.hosts }}
+{{- if $.Values.enableInsecureLogin }}
+     http://{{ . }}
+{{- else }}
     https://{{ . }}
 {{- end }}
+{{- end }}

 {{- else if contains "NodePort" .Values.service.type }}

 Get the Kubernetes Dashboard URL by running:
  export NODE_PORT=$(kubectl get -o jsonpath="{.spec.ports[0].nodePort}" services {{ template "kubernetes-dashboard.fullname" . }})
  export NODE_IP=$(kubectl get nodes -o jsonpath="{.items[0].status.addresses[0].address}")
+{{- if .Values.enableInsecureLogin }}
+  echo http://$NODE_IP:$NODE_PORT/
+{{- else }}
  echo https://$NODE_IP:$NODE_PORT/
+{{- end }}

 {{- else if contains "LoadBalancer" .Values.service.type }}

@@ -22,11 +30,20 @@ Get the Kubernetes Dashboard URL by running:

 Get the Kubernetes Dashboard URL by running:
  export SERVICE_IP=$(kubectl get svc {{ template "kubernetes-dashboard.fullname" . }} -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
+{{- if .Values.enableInsecureLogin }}
+  echo http://$SERVICE_IP/
+{{- else }}
  echo https://$SERVICE_IP/
+{{- end }}
 {{- else if contains "ClusterIP"  .Values.service.type }}

 Get the Kubernetes Dashboard URL by running:
  export POD_NAME=$(kubectl get pods -n {{ .Release.Namespace }} -l "app={{ template "kubernetes-dashboard.name" . }},release={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
+{{- if .Values.enableInsecureLogin }}
+  echo http://127.0.0.1:9090/
+  kubectl -n {{ .Release.Namespace }} port-forward $POD_NAME 9090:9090
+{{- else }}
  echo https://127.0.0.1:8443/
  kubectl -n {{ .Release.Namespace }} port-forward $POD_NAME 8443:8443
 {{- end }}
+{{- end }}
@@ -35,14 +35,24 @@ spec:
        image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
        imagePullPolicy: {{ .Values.image.pullPolicy }}
        args:
+{{- if .Values.enableInsecureLogin }}
+          - --enable-insecure-login
+{{- else }}
          - --auto-generate-certificates
+{{- end }}
 {{- if .Values.extraArgs }}
 {{ toYaml .Values.extraArgs | indent 10 }}
 {{- end }}
        ports:
+{{- if .Values.enableInsecureLogin }}
+        - name: http
+          containerPort: 9090
+          protocol: TCP
+{{- else }}
        - name: https
          containerPort: 8443
          protocol: TCP
+{{- end }}
        volumeMounts:
        - name: kubernetes-dashboard-certs
          mountPath: /certs
@@ -51,9 +61,15 @@ spec:
          name: tmp-volume
        livenessProbe:
          httpGet:
+{{- if .Values.enableInsecureLogin }}
+            scheme: HTTP
+            path: /
+            port: 9090
+{{- else }}
            scheme: HTTPS
            path: /
            port: 8443
+{{- end }}
          initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
          timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
        resources:
@@ -19,7 +19,11 @@ spec:
  type: {{ .Values.service.type }}
  ports:
  - port: {{ .Values.service.externalPort }}
+{{- if .Values.enableInsecureLogin }}
+    targetPort: 9090
+{{- else }}
    targetPort: 8443
+{{- end }}
 {{- if hasKey .Values.service "nodePort" }}
    nodePort: {{ .Values.service.nodePort }}
 {{- end }}
@@ -18,6 +18,9 @@ labels: {}
 # kubernetes.io/cluster-service: "true"
 # kubernetes.io/name: "Kubernetes Dashboard"

+## Serve application over HTTP without TLS
+enableInsecureLogin: false
+
 ## Additional container arguments
 ##
 # extraArgs: