* [stable/kubernetes-dashboard] Support read-only mode
Add a ClusterRole with read only permissions as described in
http://blog.cowger.us/2018/07/03/a-read-only-kubernetes-dashboard.html
Allow to modify only Secrets and ConfigMaps required to start pods.
Signed-off-by: Eugene Glotov <kivagant@gmail.com>
* [stable/kubernetes-dashboard] Use namespaces in kubectl commands
Signed-off-by: Eugene Glotov <kivagant@gmail.com>
* [stable/kubernetes-dashboard] Bump major Chart version
Signed-off-by: Eugene Glotov <kivagant@gmail.com>
* [stable/kubernetes-dashboard] Add imagePullSecrets support
Signed-off-by: David Cruz <david@typokign.com>
* Bump version
Signed-off-by: David Cruz <david@typokign.com>
* Fix gce-ingress integration for kubernetes-dashboard
To make the gce-ingress working:
- The service needs to have a named port along with annotation for
the protocol mapping the port name with HTTPS in that case
- The ingress requires both / and /* to be forwarded to the backend
to be able to serve all the dashboard paths and sub paths
Signed-off-by: Maxime Belanger <mbelanger@dialogue.co>
* Simplify the change and add comments instead
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* Major changes
- Now supports `paths` in place of `path`
- Add documentation for GCE ingress support instead of adding some logic
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* Port naming according to enableInsecureLogin value
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* Add a migration documentation and fix some .md linting issues
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* New backend-protocol ingress-nginx annotations
Signed-off-by: Jonathan Liuti <liuti.john@gmail.com>
* Reword and move comment
Signed-off-by: Jonathan Liuti <liuti.john@gmail.com>
* Change version not app version
Signed-off-by: Jonathan Liuti <liuti.john@gmail.com>
* [stable/kubernetes-dashboard] Use the target port number instead of a name
Older (but still actual) versions of some Network Policy providers don't support named ports as
a value of `targetPort` field in the Service spec.
Changing it to the number shouldn't break the UX for existing installations.
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/kubernetes-dashboard] Bump chart version to 0.7.4
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* Cater for full set lof Elastic Output Plugin parameters (Auth & TLS)
* Cater for full set of Elastic Output Plugin parameters (Auth & TLS)
* update Github User
* README.md & TLS enablement updates
* Reverted chart version due to Helm lint error
* bump chart version to 0.3.0
* RBAC and ServiceAccount updated to standards
* fixed linting
* Revert "fixed linting"
This reverts commit 5bd65f6624.
Changes to be committed:
modified: stable/fluent-bit/values.yaml
* fixed linting
* fixed linting
* version bump
* minor version bump. clusterrolebinding uses serviceAccountName
* [stable/kubernetes-dashboard] set ingress Secure-Backends default value
* bump chart version
* Comment out ingress.annotations
* fix linting
* README ingress.annotation defaults correction
* [kubernetes-dashboard] Adds docs about fullnameOverride for kubectl proxy
If you want to use 'localhost:8001/ui' as a shorthand to get
to the kubernetes-dashboard, the service name must be
'kubernetes-dashboard', but this is not typically what
Helm generates. This commit adds a short note
about how to override that.
* Increments kubernetes-dashboard chart version
* Updated helm chart for Kubernetes Dashboard to harden cluster security
* Fixed typo
* Modified to be in line with RBAC guidlines
* Add link to guide
* Fixed typo
* [stable/kubernetes-dashboard] Make chart more standardized
The charts ecosystem seems to be converging on some standards, which
seems to be driven by the patterns laid out in `helm create`. This makes
the following breaking changes to this crate:
* move the image definition into a map
* move the service definition into a map
* rename httpPort to externalPort
* reordered files to match the `helm create` order
* Made sure chart names don't contain '+'
Finally this bumps the version from 0.4 to 0.5 since this is not
backwards compatible.
* [stable/kubernetes-dashboard] allow for custom deployment and service labels
* [stable/kubernetes-dashboard] allow service name to be overridden
Closes#2099.
* [stable/kubernetes-dashboard] Add links and the k8s logo
Assigning a name to the kubernetes-dashboard service port prevents
kubernetes from detecting its endpoints. Removing the name from the
service port fixes this issue.
* Kubernetes Dashboard Chart
Adds support for managing the Kubernetes Dashboard lifecycle via
Helm.
* Add notes.
* Fix namespaceing issues and remove extra defaults.
* Fix namespaceing issue in svc.
* Fix ws issues.
* Change default resource limits to match GKE.
* Fix min length of name.
* Fix ImagePullPolicy typo
* Remove namespace and remove extra release info.
* Use name instead of fullname in labels.
* Fix misaligned label selector.
* Fix misspecified target port.
* Use deployment release name in the svc selector as well as named port.
* Fix dashboard notes.
* Add ingress, bump version, fix notes label selector.
* Fix bad port number in notes.
* Fix ingress template scope issue.
* [stable/kubernetes-dashboard] use github username in maintainers
Joshua Bussdieker
Eugene Glotov
David Cruz
Pavels Veretennikovs
Connor Poole
Brightside
Emii Khaos
Maxime Belanger
Jonathan Liuti
Cédric de Saint Martin
Michael Barrientos
Muhammad Ahsan
Ferenc HERNADI
Lyle Franklin
Mikhail Zholobov
AdamDang
Maximilian Gaß
Jeff Hastings
Gregory May
Jason Gwartz
Taylor D. Edmiston
Oilbeater
Kai Chen
Adam Netočný
Philippe Schommers
Jakub Kvita
Erick Tryzelaar
James Rawlings
Matt Farina
Michal Cwienczek
zoues
Kevin Schumacher
Victor Unegbu
O. Yuanying
kfox1111
Adnan Abdulhussein
Quentin Nerden