[stable/kubernetes-dashboard] Add RBAC support (#1415)

* [stable/kubernetes-dashboard] Add RBAC support

* Bump chart version

stable/kubernetes-dashboard/Chart.yaml

@@ -1,5 +1,5 @@
 name: kubernetes-dashboard
-version: 0.1.1
+version: 0.2.0
 appVersion: 1.6.3
 description: General-purpose web UI for Kubernetes clusters
 keywords:

stable/kubernetes-dashboard/README.md

@@ -49,6 +49,9 @@ The following tables lists the configurable parameters of the kubernetes-dashboa
 | `ingress.enabled`     | Enable ingress controller resource | `false`                                                                  |
 | `ingress.hosts`       | Dashboard Hostnames                | `nil`                                                                    |
 | `ingress.tls`         | Ingress TLS configuration          | `[]`                                                                     |
+| `rbac.create`         | Create & use RBAC resources        | `false`                                                                  |
+| `rbac.serviceAccountName` |  ServiceAccount kubernetes-dashboard will use (ignored if rbac.create=true) | `default`        |
+
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
 
 ```console

stable/kubernetes-dashboard/templates/deployment.yaml

@@ -24,6 +24,7 @@ spec:
         chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
         kubernetes.io/cluster-service: "true"
     spec:
+      serviceAccountName: {{ if .Values.rbac.create }}{{ template "fullname" . }}{{ else }}"{{ .Values.rbac.serviceAccountName }}"{{ end }}
       nodeSelector:
 {{ toYaml .Values.nodeSelector | indent 10 }}
       containers:

stable/kubernetes-dashboard/templates/rolebinding.yaml

@@ -0,0 +1,19 @@
+{{- if .Values.rbac.create }}
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app: {{ template "name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+  name: {{ template "fullname" . }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+  - kind: ServiceAccount
+    name: {{ template "fullname" . }}
+    namespace: {{ .Release.Namespace }}
+{{- end -}}

stable/kubernetes-dashboard/templates/serviceaccount.yaml

@@ -0,0 +1,11 @@
+{{- if .Values.rbac.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app: {{ template "name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+  name: {{ template "fullname" . }}
+{{- end -}}

stable/kubernetes-dashboard/values.yaml

@@ -45,3 +45,12 @@ ingress:
   #   - secretName: kubernetes-dashboard-tls
   #     hosts:
   #       - kubernetes-dashboard.domain.com
+
+rbac:
+  ## If true, create & use RBAC resources
+  #
+  create: false
+
+  ## Ignored if rbac.create is true
+  #
+  serviceAccountName: default