home-ops icon indicating copy to clipboard operation
home-ops copied to clipboard

Published 20 hours ago • verified publisher icon axeII

feat(helm)!: Update kubernetes-dashboard ( 6.0.8 → 7.5.0 )

Open bot-akira[bot] opened this issue 1 year ago • 4 comments
trafficstars

This PR contains the following updates:

Package Update Change
kubernetes-dashboard major 6.0.8 -> 7.5.0

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

kubernetes/dashboard (kubernetes-dashboard)

v7.5.0

Compare Source

What's Changed

API/UI
Chart

New Contributors

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.4.0...kubernetes-dashboard-7.5.0

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.7.0
docker.io/kubernetesui/dashboard-auth:1.1.3
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.4.0

v7.4.0

Compare Source

What's Changed

API

New Contributors

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.3.2...kubernetes-dashboard-7.4.0

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.6.0
docker.io/kubernetesui/dashboard-auth:1.1.3
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.3.0

v7.3.2

Compare Source

What's Changed

API
Helm Chart

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.3.1...kubernetes-dashboard-7.3.2

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.5.0
docker.io/kubernetesui/dashboard-auth:1.1.3
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.3.0

v7.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.3.0...kubernetes-dashboard-7.3.1

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.4.3
docker.io/kubernetesui/dashboard-auth:1.1.3
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.3.0

v7.3.0

Compare Source

What's Changed

Helm Chart

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.2.0...kubernetes-dashboard-7.3.0

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.4.1
docker.io/kubernetesui/dashboard-auth:1.1.2
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.3

v7.2.0

Compare Source

What's Changed

API
Helm Chart
  • Update csrf secret handling. It will no longer be regenerated on every helm run. Instead, it will use a lookup function to make sure that the private.key value is not empty. If secret will be deleted or key changed, then checksum annotation on api/auth containers will trigger a rollout restart.
  • Update kong dns_order configuration to include experimental AAAA record for ipv6 lookup. It can potentially fix issues with accessing Dashboard on IPv6-enabled cluster. Closes #​8855
  • Reenable SA token automount for auth container. It is required to initialize the in-cluster go client.
  • Bump API image to 1.4.1
  • Optimize kong deployment to minimize memory usage (down from ~250Mi to ~75Mi on start)
  • feat(chart): add automountServiceAccountToken to deployment specs in Helm chart by @​jnoordsij in https://github.com/kubernetes/dashboard/pull/8869
  • feat(chart): allow setting priorityClassName on deployments by @​jnoordsij in https://github.com/kubernetes/dashboard/pull/8870
  • feat(chart): bump chart version to 7.2.0 by @​floreks in https://github.com/kubernetes/dashboard/pull/8882

New Contributors

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.1.3...kubernetes-dashboard-7.2.0

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.4.1
docker.io/kubernetesui/dashboard-auth:1.1.2
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.3

v7.1.3

Compare Source

What's Changed

API
Web
Helm Chart

New Contributors

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.1.2...kubernetes-dashboard-7.1.3

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.4.0
docker.io/kubernetesui/dashboard-auth:1.1.2
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.3

v7.1.2

Compare Source

What's changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.1.1...kubernetes-dashboard-7.1.2

Helm Chart
  • bump API image to 1.3.0

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.3.0
docker.io/kubernetesui/dashboard-auth:1.1.1
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.2

v7.1.1

Compare Source

What's changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/auth/v1.1.1...kubernetes-dashboard-7.1.1

Auth
  • add /api/v1/me endpoint with username and as an information if user was correctly authenticated
Web
  • update auth header handling
  • update user info panel with username from /me endpoint
  • update login to skip login view when auth header is present
Helm Chart
  • update gateway configuration to support /me endpoint routing

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.2.0
docker.io/kubernetesui/dashboard-auth:1.1.1
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.2

v7.1.0

Compare Source

What's changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.0.1...kubernetes-dashboard-7.1.0

Helm chart

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.2.0
docker.io/kubernetesui/dashboard-auth:1.1.0
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.1

v7.0.1

Compare Source

What's changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/web/v1.2.1...kubernetes-dashboard-7.0.1

Web container
Helm chart

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.2.0
docker.io/kubernetesui/dashboard-auth:1.1.0
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.1

v7.0.0

Breaking change

This release introduces a couple of important changes to how Kubernetes Dashboard generally works. It requires clean installation.
API container

It is now fully stateless, meaning it does not rely on Kubernetes resources to run. It will always require an authorization token to be pr

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • [ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

bot-akira[bot] avatar Apr 23 '24 18:04 bot-akira[bot] 

--- kubernetes/apps/monitoring/kubernetes-dashboard/app Kustomization: flux-system/kubernetes-dashboard HelmRelease: monitoring/kubernetes-dashboard

+++ kubernetes/apps/monitoring/kubernetes-dashboard/app Kustomization: flux-system/kubernetes-dashboard HelmRelease: monitoring/kubernetes-dashboard

@@ -13,13 +13,13 @@

     spec:
       chart: kubernetes-dashboard
       sourceRef:
         kind: HelmRepository
         name: kubernetes-dashboard
         namespace: flux-system
-      version: 6.0.8
+      version: 7.5.0
   install:
     remediation:
       retries: 3
   interval: 30m
   uninstall:
     keepHistory: false

bot-akira[bot] avatar Apr 23 '24 18:04 bot-akira[bot] 

--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard

@@ -1,10 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-  name: kubernetes-dashboard
-
--- HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kubernetes-dashboard-settings

+++ HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kubernetes-dashboard-settings

@@ -1,11 +0,0 @@

----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-  name: kubernetes-dashboard-settings
-data: null
-
--- HelmRelease: monitoring/kubernetes-dashboard ClusterRole: monitoring/kubernetes-dashboard-metrics

+++ HelmRelease: monitoring/kubernetes-dashboard ClusterRole: monitoring/kubernetes-dashboard-metrics

@@ -1,20 +0,0 @@

----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: kubernetes-dashboard-metrics
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-rules:
-- apiGroups:
-  - metrics.k8s.io
-  resources:
-  - pods
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-
--- HelmRelease: monitoring/kubernetes-dashboard ClusterRoleBinding: monitoring/kubernetes-dashboard-metrics

+++ HelmRelease: monitoring/kubernetes-dashboard ClusterRoleBinding: monitoring/kubernetes-dashboard-metrics

@@ -1,18 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: kubernetes-dashboard-metrics
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kubernetes-dashboard-metrics
-subjects:
-- kind: ServiceAccount
-  name: kubernetes-dashboard
-  namespace: monitoring
-
--- HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard

@@ -1,53 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  resourceNames:
-  - kubernetes-dashboard-key-holder
-  - kubernetes-dashboard-certs
-  - kubernetes-dashboard-csrf
-  verbs:
-  - get
-  - update
-  - delete
-- apiGroups:
-  - ''
-  resources:
-  - configmaps
-  resourceNames:
-  - kubernetes-dashboard-settings
-  verbs:
-  - get
-  - update
-- apiGroups:
-  - ''
-  resources:
-  - services
-  resourceNames:
-  - heapster
-  - dashboard-metrics-scraper
-  verbs:
-  - proxy
-- apiGroups:
-  - ''
-  resources:
-  - services/proxy
-  resourceNames:
-  - heapster
-  - 'http:heapster:'
-  - 'https:heapster:'
-  - dashboard-metrics-scraper
-  - http:dashboard-metrics-scraper
-  verbs:
-  - get
-
--- HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard

@@ -1,18 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: kubernetes-dashboard
-subjects:
-- kind: ServiceAccount
-  name: kubernetes-dashboard
-  namespace: monitoring
-
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard

@@ -1,22 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/component: kubernetes-dashboard
-    kubernetes.io/cluster-service: 'true'
-spec:
-  type: ClusterIP
-  ports:
-  - port: 443
-    targetPort: https
-    name: https
-  selector:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/component: kubernetes-dashboard
-
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard

@@ -1,109 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/component: kubernetes-dashboard
-spec:
-  replicas: 1
-  strategy:
-    rollingUpdate:
-      maxSurge: 0
-      maxUnavailable: 1
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: kubernetes-dashboard
-      app.kubernetes.io/instance: kubernetes-dashboard
-      app.kubernetes.io/component: kubernetes-dashboard
-  template:
-    metadata:
-      annotations: null
-      labels:
-        app.kubernetes.io/name: kubernetes-dashboard
-        app.kubernetes.io/instance: kubernetes-dashboard
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/component: kubernetes-dashboard
-    spec:
-      securityContext:
-        runAsNonRoot: true
-        seccompProfile:
-          type: RuntimeDefault
-      serviceAccountName: kubernetes-dashboard
-      containers:
-      - name: kubernetes-dashboard
-        image: kubernetesui/dashboard:v2.7.0
-        imagePullPolicy: IfNotPresent
-        args:
-        - --namespace=monitoring
-        - --auto-generate-certificates
-        - --sidecar-host=http://127.0.0.1:8000
-        - --enable-insecure-login
-        - --enable-skip-login
-        - --disable-settings-authorizer
-        ports:
-        - name: https
-          containerPort: 8443
-          protocol: TCP
-        volumeMounts:
-        - name: kubernetes-dashboard-certs
-          mountPath: /certs
-        - mountPath: /tmp
-          name: tmp-volume
-        livenessProbe:
-          httpGet:
-            scheme: HTTPS
-            path: /
-            port: 8443
-          initialDelaySeconds: 30
-          timeoutSeconds: 30
-        resources:
-          limits:
-            cpu: 2
-            memory: 200Mi
-          requests:
-            cpu: 100m
-            memory: 200Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsGroup: 2001
-          runAsUser: 1001
-      - name: dashboard-metrics-scraper
-        image: kubernetesui/metrics-scraper:v1.0.9
-        imagePullPolicy: IfNotPresent
-        ports:
-        - containerPort: 8000
-          protocol: TCP
-        livenessProbe:
-          httpGet:
-            scheme: HTTP
-            path: /
-            port: 8000
-          initialDelaySeconds: 30
-          timeoutSeconds: 30
-        volumeMounts:
-        - mountPath: /tmp
-          name: tmp-volume
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsGroup: 2001
-          runAsUser: 1001
-      volumes:
-      - name: kubernetes-dashboard-certs
-        secret:
-          secretName: kubernetes-dashboard-certs
-      - name: tmp-volume
-        emptyDir: {}
-
--- HelmRelease: monitoring/kubernetes-dashboard Ingress: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard Ingress: monitoring/kubernetes-dashboard

@@ -1,29 +0,0 @@

----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-  annotations:
-    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
-    service.alpha.kubernetes.io/app-protocols: '{"https":"HTTPS"}'
-spec:
-  ingressClassName: nginx
-  rules:
-  - host: dashboard.${SECRET_DOMAIN}
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: kubernetes-dashboard
-            port:
-              number: 443
-  tls:
-  - hosts:
-    - dashboard.${SECRET_DOMAIN}
-
--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-kong

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-kong

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kubernetes-dashboard-kong
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-api
+
--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-metrics-scraper
+
--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-web
+
--- HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kong-dbless-config

+++ HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kong-dbless-config

@@ -0,0 +1,53 @@

+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kong-dbless-config
+data:
+  kong.yml: |
+    _format_version: "3.0"
+    services:
+      - name: auth
+        host: kubernetes-dashboard-auth
+        port: 8000
+        protocol: http
+        routes:
+          - name: authLogin
+            paths:
+              - /api/v1/login
+            strip_path: false
+          - name: authCsrf
+            paths:
+              - /api/v1/csrftoken/login
+            strip_path: false
+          - name: authMe
+            paths:
+              - /api/v1/me
+            strip_path: false
+      - name: api
+        host: kubernetes-dashboard-api
+        port: 8000
+        protocol: http
+        routes:
+          - name: api
+            paths:
+              - /api
+            strip_path: false
+          - name: metrics
+            paths:
+              - /metrics
+            strip_path: false
+      - name: web
+        host: kubernetes-dashboard-web
+        port: 8000
+        protocol: http
+        routes:
+          - name: root
+            paths:
+              - /
+            strip_path: false
+
--- HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kubernetes-dashboard-web-settings

+++ HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kubernetes-dashboard-web-settings

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-web-settings
+data: null
+
--- HelmRelease: monitoring/kubernetes-dashboard ClusterRole: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard ClusterRole: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,20 @@

+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-metrics-scraper
+rules:
+- apiGroups:
+  - metrics.k8s.io
+  resources:
+  - pods
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch
+
--- HelmRelease: monitoring/kubernetes-dashboard ClusterRoleBinding: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard ClusterRoleBinding: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-metrics-scraper
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: kubernetes-dashboard-metrics-scraper
+subjects:
+- kind: ServiceAccount
+  name: kubernetes-dashboard-metrics-scraper
+  namespace: monitoring
+
--- HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,20 @@

+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-api
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - services/proxy
+  resourceNames:
+  - kubernetes-dashboard-metrics-scraper
+  - http:kubernetes-dashboard-metrics-scraper
+  verbs:
+  - get
+
--- HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,20 @@

+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-web
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  resourceNames:
+  - kubernetes-dashboard-web-settings
+  verbs:
+  - get
+  - update
+
--- HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,17 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-api
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: kubernetes-dashboard-api
+subjects:
+- kind: ServiceAccount
+  name: kubernetes-dashboard-api
+
--- HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,17 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-web
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: kubernetes-dashboard-web
+subjects:
+- kind: ServiceAccount
+  name: kubernetes-dashboard-web
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-kong-manager

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-kong-manager

@@ -0,0 +1,26 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kubernetes-dashboard-kong-manager
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: NodePort
+  ports:
+  - name: kong-manager
+    port: 8002
+    targetPort: 8002
+    protocol: TCP
+  - name: kong-manager-tls
+    port: 8445
+    targetPort: 8445
+    protocol: TCP
+  selector:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/component: app
+    app.kubernetes.io/instance: kubernetes-dashboard
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-kong-proxy

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-kong-proxy

@@ -0,0 +1,23 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kubernetes-dashboard-kong-proxy
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    enable-metrics: 'true'
+spec:
+  type: ClusterIP
+  ports:
+  - name: kong-proxy-tls
+    port: 443
+    targetPort: 8443
+    protocol: TCP
+  selector:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/component: app
+    app.kubernetes.io/instance: kubernetes-dashboard
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,20 @@

+---
+kind: Service
+apiVersion: v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-api
+    app.kubernetes.io/component: api
+  name: kubernetes-dashboard-api
+spec:
+  ports:
+  - name: api
+    port: 8000
+  selector:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-api
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-auth

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-auth

@@ -0,0 +1,20 @@

+---
+kind: Service
+apiVersion: v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-auth
+    app.kubernetes.io/component: auth
+  name: kubernetes-dashboard-auth
+spec:
+  ports:
+  - name: auth
+    port: 8000
+  selector:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-auth
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,19 @@

+---
+kind: Service
+apiVersion: v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+    app.kubernetes.io/component: metrics-scraper
+  name: kubernetes-dashboard-metrics-scraper
+spec:
+  ports:
+  - port: 8000
+  selector:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,20 @@

+---
+kind: Service
+apiVersion: v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-web
+    app.kubernetes.io/component: web
+  name: kubernetes-dashboard-web
+spec:
+  ports:
+  - name: web
+    port: 8000
+  selector:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-web
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-kong

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-kong

@@ -0,0 +1,254 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kubernetes-dashboard-kong
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: app
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: kong
+      app.kubernetes.io/component: app
+      app.kubernetes.io/instance: kubernetes-dashboard
+  template:
+    metadata:
+      annotations:
+        kuma.io/service-account-token-volume: kubernetes-dashboard-kong-token
+        kuma.io/gateway: enabled
+        traffic.sidecar.istio.io/includeInboundPorts: ''
+      labels:
+        app.kubernetes.io/name: kong
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/component: app
+        app: kubernetes-dashboard-kong
+        version: '3.6'
+    spec:
+      serviceAccountName: kubernetes-dashboard-kong
+      automountServiceAccountToken: false
+      initContainers:
+      - name: clear-stale-pid
+        image: kong:3.6
+        imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
+        resources: {}
+        command:
+        - rm
+        - -vrf
+        - $KONG_PREFIX/pids
+        env:
+        - name: KONG_ADMIN_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_GUI_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_GUI_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_LISTEN
+          value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
+        - name: KONG_CLUSTER_LISTEN
+          value: 'off'
+        - name: KONG_DATABASE
+          value: 'off'
+        - name: KONG_DECLARATIVE_CONFIG
+          value: /kong_dbless/kong.yml
+        - name: KONG_DNS_ORDER
+          value: LAST,A,CNAME,AAAA,SRV
+        - name: KONG_LUA_PACKAGE_PATH
+          value: /opt/?.lua;/opt/?/init.lua;;
+        - name: KONG_NGINX_WORKER_PROCESSES
+          value: '1'
+        - name: KONG_PLUGINS
+          value: 'off'
+        - name: KONG_PORTAL_API_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_PORTAL_API_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_PORT_MAPS
+          value: 443:8443
+        - name: KONG_PREFIX
+          value: /kong_prefix/
+        - name: KONG_PROXY_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_PROXY_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_PROXY_LISTEN
+          value: 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
+        - name: KONG_PROXY_STREAM_ACCESS_LOG
+          value: /dev/stdout basic
+        - name: KONG_PROXY_STREAM_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ROUTER_FLAVOR
+          value: traditional
+        - name: KONG_STATUS_ACCESS_LOG
+          value: 'off'
+        - name: KONG_STATUS_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_STATUS_LISTEN
+          value: 0.0.0.0:8100, [::]:8100
+        - name: KONG_STREAM_LISTEN
+          value: 'off'
+        volumeMounts:
+        - name: kubernetes-dashboard-kong-prefix-dir
+          mountPath: /kong_prefix/
+        - name: kubernetes-dashboard-kong-tmp
+          mountPath: /tmp
+        - name: kong-custom-dbless-config-volume
+          mountPath: /kong_dbless/
+      containers:
+      - name: proxy
+        image: kong:3.6
+        imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
+        env:
+        - name: KONG_ADMIN_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_GUI_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_GUI_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_LISTEN
+          value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
+        - name: KONG_CLUSTER_LISTEN
+          value: 'off'
+        - name: KONG_DATABASE
+          value: 'off'
+        - name: KONG_DECLARATIVE_CONFIG
+          value: /kong_dbless/kong.yml
+        - name: KONG_DNS_ORDER
+          value: LAST,A,CNAME,AAAA,SRV
+        - name: KONG_LUA_PACKAGE_PATH
+          value: /opt/?.lua;/opt/?/init.lua;;
+        - name: KONG_NGINX_WORKER_PROCESSES
+          value: '1'
+        - name: KONG_PLUGINS
+          value: 'off'
+        - name: KONG_PORTAL_API_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_PORTAL_API_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_PORT_MAPS
+          value: 443:8443
+        - name: KONG_PREFIX
+          value: /kong_prefix/
+        - name: KONG_PROXY_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_PROXY_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_PROXY_LISTEN
+          value: 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
+        - name: KONG_PROXY_STREAM_ACCESS_LOG
+          value: /dev/stdout basic
+        - name: KONG_PROXY_STREAM_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ROUTER_FLAVOR
+          value: traditional
+        - name: KONG_STATUS_ACCESS_LOG
+          value: 'off'
+        - name: KONG_STATUS_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_STATUS_LISTEN
+          value: 0.0.0.0:8100, [::]:8100
+        - name: KONG_STREAM_LISTEN
+          value: 'off'
+        - name: KONG_NGINX_DAEMON
+          value: 'off'
+        lifecycle:
+          preStop:
+            exec:
+              command:
+              - kong
+              - quit
+              - --wait=15
+        ports:
+        - name: proxy-tls
+          containerPort: 8443
+          protocol: TCP
+        - name: status
+          containerPort: 8100
+          protocol: TCP
+        volumeMounts:
+        - name: kubernetes-dashboard-kong-prefix-dir
+          mountPath: /kong_prefix/
+        - name: kubernetes-dashboard-kong-tmp
+          mountPath: /tmp
+        - name: kong-custom-dbless-config-volume
+          mountPath: /kong_dbless/
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /status/ready
+            port: status
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /status
+            port: status
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        resources: {}
+      securityContext: {}
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: kubernetes-dashboard-kong-prefix-dir
+        emptyDir:
+          sizeLimit: 256Mi
+      - name: kubernetes-dashboard-kong-tmp
+        emptyDir:
+          sizeLimit: 1Gi
+      - name: kubernetes-dashboard-kong-token
+        projected:
+          sources:
+          - serviceAccountToken:
+              expirationSeconds: 3607
+              path: token
+          - configMap:
+              items:
+              - key: ca.crt
+                path: ca.crt
+              name: kube-root-ca.crt
+          - downwardAPI:
+              items:
+              - fieldRef:
+                  apiVersion: v1
+                  fieldPath: metadata.namespace
+                path: namespace
+      - name: kong-custom-dbless-config-volume
+        configMap:
+          name: kong-dbless-config
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,81 @@

+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-api
+    app.kubernetes.io/component: api
+  name: kubernetes-dashboard-api
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: kubernetes-dashboard
+      app.kubernetes.io/part-of: kubernetes-dashboard
+      app.kubernetes.io/name: kubernetes-dashboard-api
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/part-of: kubernetes-dashboard
+        app.kubernetes.io/name: kubernetes-dashboard-api
+        app.kubernetes.io/component: api
+    spec:
+      containers:
+      - name: kubernetes-dashboard-api
+        image: docker.io/kubernetesui/dashboard-api:1.7.0
+        imagePullPolicy: IfNotPresent
+        args:
+        - --namespace=monitoring
+        - --metrics-scraper-service-name=kubernetes-dashboard-metrics-scraper
+        env:
+        - name: CSRF_KEY
+          valueFrom:
+            secretKeyRef:
+              name: kubernetes-dashboard-csrf
+              key: private.key
+        - name: GOMAXPROCS
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.cpu
+        - name: GOMEMLIMIT
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.memory
+        ports:
+        - containerPort: 8000
+          name: api
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 2001
+          runAsUser: 1001
+        resources:
+          limits:
+            cpu: 250m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 200Mi
+      automountServiceAccountToken: true
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp-volume
+      serviceAccountName: kubernetes-dashboard-api
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-auth

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-auth

@@ -0,0 +1,78 @@

+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-auth
+    app.kubernetes.io/component: auth
+  name: kubernetes-dashboard-auth
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: kubernetes-dashboard
+      app.kubernetes.io/part-of: kubernetes-dashboard
+      app.kubernetes.io/name: kubernetes-dashboard-auth
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/part-of: kubernetes-dashboard
+        app.kubernetes.io/name: kubernetes-dashboard-auth
+        app.kubernetes.io/component: auth
+    spec:
+      containers:
+      - name: kubernetes-dashboard-auth
+        image: docker.io/kubernetesui/dashboard-auth:1.1.3
+        imagePullPolicy: IfNotPresent
+        args: null
+        env:
+        - name: CSRF_KEY
+          valueFrom:
+            secretKeyRef:
+              name: kubernetes-dashboard-csrf
+              key: private.key
+        - name: GOMAXPROCS
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.cpu
+        - name: GOMEMLIMIT
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.memory
+        ports:
+        - containerPort: 8000
+          name: auth
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 2001
+          runAsUser: 1001
+        resources:
+          limits:
+            cpu: 250m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 200Mi
+      automountServiceAccountToken: true
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp-volume
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,80 @@

+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+    app.kubernetes.io/component: metrics-scraper
+  name: kubernetes-dashboard-metrics-scraper
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: kubernetes-dashboard
+      app.kubernetes.io/part-of: kubernetes-dashboard
+      app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/part-of: kubernetes-dashboard
+        app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+        app.kubernetes.io/component: metrics-scraper
+      annotations: null
+    spec:
+      containers:
+      - name: kubernetes-dashboard-metrics-scraper
+        image: docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
+        imagePullPolicy: IfNotPresent
+        env:
+        - name: GOMAXPROCS
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.cpu
+        - name: GOMEMLIMIT
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.memory
+        ports:
+        - containerPort: 8000
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 2001
+          runAsUser: 1001
+        resources:
+          limits:
+            cpu: 250m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 200Mi
+        livenessProbe:
+          httpGet:
+            path: /
+            port: 8000
+            scheme: HTTP
+          initialDelaySeconds: 30
+          timeoutSeconds: 30
+      automountServiceAccountToken: true
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp-volume
+      serviceAccountName: kubernetes-dashboard-metrics-scraper
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,77 @@

+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-web
+    app.kubernetes.io/component: web
+  name: kubernetes-dashboard-web
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: kubernetes-dashboard
+      app.kubernetes.io/part-of: kubernetes-dashboard
+      app.kubernetes.io/name: kubernetes-dashboard-web
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/part-of: kubernetes-dashboard
+        app.kubernetes.io/name: kubernetes-dashboard-web
+        app.kubernetes.io/component: web
+      annotations: null
+    spec:
+      containers:
+      - name: kubernetes-dashboard-web
+        image: docker.io/kubernetesui/dashboard-web:1.4.0
+        imagePullPolicy: IfNotPresent
+        args:
+        - --namespace=monitoring
+        - --settings-config-map-name=kubernetes-dashboard-web-settings
+        env:
+        - name: GOMAXPROCS
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.cpu
+        - name: GOMEMLIMIT
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.memory
+        ports:
+        - containerPort: 8000
+          name: web
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 2001
+          runAsUser: 1001
+        resources:
+          limits:
+            cpu: 250m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 200Mi
+      automountServiceAccountToken: true
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp-volume
+      serviceAccountName: kubernetes-dashboard-web
+

bot-akira[bot] avatar Apr 23 '24 18:04 bot-akira[bot]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time

See detailed report in MegaLinter reports Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

axeII avatar Apr 23 '24 18:04 axeII

This update changes helmchart svc settings. Currently on hold.

axeII avatar Apr 23 '24 22:04 axeII