elf-infra icon indicating copy to clipboard operation
elf-infra copied to clipboard

Published 20 hours ago • verified publisher icon geek-cookbook

Update Helm release kubernetes-dashboard to v7 (ci)

Open funkypenguin-autochef opened this issue 9 months ago • 0 comments

This PR contains the following updates:

Package Update Change
kubernetes-dashboard major 6.0.x -> 7.4.x

Release Notes

kubernetes/dashboard (kubernetes-dashboard)

v7.4.0

Compare Source

General-purpose web UI for Kubernetes clusters

v7.3.2

Compare Source

What's Changed

API
Helm Chart

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.3.1...kubernetes-dashboard-7.3.2

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.5.0
docker.io/kubernetesui/dashboard-auth:1.1.3
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.3.0

v7.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.3.0...kubernetes-dashboard-7.3.1

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.4.3
docker.io/kubernetesui/dashboard-auth:1.1.3
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.3.0

v7.3.0

Compare Source

What's Changed

Helm Chart

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.2.0...kubernetes-dashboard-7.3.0

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.4.1
docker.io/kubernetesui/dashboard-auth:1.1.2
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.3

v7.2.0

Compare Source

What's Changed

API
Helm Chart
  • Update csrf secret handling. It will no longer be regenerated on every helm run. Instead, it will use a lookup function to make sure that the private.key value is not empty. If secret will be deleted or key changed, then checksum annotation on api/auth containers will trigger a rollout restart.
  • Update kong dns_order configuration to include experimental AAAA record for ipv6 lookup. It can potentially fix issues with accessing Dashboard on IPv6-enabled cluster. Closes #​8855
  • Reenable SA token automount for auth container. It is required to initialize the in-cluster go client.
  • Bump API image to 1.4.1
  • Optimize kong deployment to minimize memory usage (down from ~250Mi to ~75Mi on start)
  • feat(chart): add automountServiceAccountToken to deployment specs in Helm chart by @​jnoordsij in https://github.com/kubernetes/dashboard/pull/8869
  • feat(chart): allow setting priorityClassName on deployments by @​jnoordsij in https://github.com/kubernetes/dashboard/pull/8870
  • feat(chart): bump chart version to 7.2.0 by @​floreks in https://github.com/kubernetes/dashboard/pull/8882

New Contributors

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.1.3...kubernetes-dashboard-7.2.0

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.4.1
docker.io/kubernetesui/dashboard-auth:1.1.2
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.3

v7.1.3

Compare Source

What's Changed

API
Web
Helm Chart

New Contributors

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.1.2...kubernetes-dashboard-7.1.3

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.4.0
docker.io/kubernetesui/dashboard-auth:1.1.2
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.3

v7.1.2

Compare Source

What's changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.1.1...kubernetes-dashboard-7.1.2

Helm Chart
  • bump API image to 1.3.0

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.3.0
docker.io/kubernetesui/dashboard-auth:1.1.1
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.2

v7.1.1

Compare Source

What's changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/auth/v1.1.1...kubernetes-dashboard-7.1.1

Auth
  • add /api/v1/me endpoint with username and as an information if user was correctly authenticated
Web
  • update auth header handling
  • update user info panel with username from /me endpoint
  • update login to skip login view when auth header is present
Helm Chart
  • update gateway configuration to support /me endpoint routing

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.2.0
docker.io/kubernetesui/dashboard-auth:1.1.1
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.2

v7.1.0

Compare Source

What's changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/kubernetes-dashboard-7.0.1...kubernetes-dashboard-7.1.0

Helm chart

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.2.0
docker.io/kubernetesui/dashboard-auth:1.1.0
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.1

v7.0.1

Compare Source

What's changed

Full Changelog: https://github.com/kubernetes/dashboard/compare/web/v1.2.1...kubernetes-dashboard-7.0.1

Web container
Helm chart

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.2.0
docker.io/kubernetesui/dashboard-auth:1.1.0
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.1

v7.0.0

Breaking change

This release introduces a couple of important changes to how Kubernetes Dashboard generally works. It requires clean installation.
API container

It is now fully stateless, meaning it does not rely on Kubernetes resources to run. It will always require an authorization token to be present to authorize the request. It is no longer possible for the API container to use its own SA privileges to skip authorization. All arguments that were frontend specific have either been removed or moved to the Web container.

  • The JWE encrypted token has been removed completely and we now rely fully on standard JWT tokens. This change has significantly simplified the auth flow.
  • The Web container now manages Settings ConfigMap
  • The plugin system has been removed as it was outdated and not working anymore. Currently, there is no plan to reintroduce it as it would require too much effort to maintain.
  • Added csrf-key argument - Base64 encoded random 256 bytes key. Can be loaded from CSRF_KEY environment variable.
Auth container

Authentication logic is now handled by the new dashboard auth container. Currently, it only exposes /login endpoint. We will also add support for OIDC with OAuth flow and /me endpoint in the future.

  • Added csrf-key argument - Base64 encoded random 256 bytes key. Can be loaded from CSRF_KEY environment variable.

Web container

  • Settings save now uses user permissions instead of Dashboard.
  • Removed restore settings ConfigMap logic
  • Increased default resource autorefresh time interval to 10 seconds
  • Added a small script to index.html to dynamically generate tag.
Go backend
  • The backend now handles frontend settings and uses ConfigMap to store them.
  • Settings backend has been updated to handle merge with default options properly in case ConfigMap does not contain all available options.
  • Replaced restful-go with gin as main web framework
Angular frontend

Since API requires from the user to always provide Authorization: Bearer <token> now, there is no way to skip login and act as a Dashboard.

  • Removed support for authentication options other than token on the login screen
  • Removed support for skip login option
  • Slightly updated login view
  • Fixed an issue with zero state not being correctly displayed on some pages
Kong gateway

Since the number of our containers is growing as we split parts of the logic, we have decided to use a gateway that will connect all of them and ensure the Dashboard is working properly. There were a couple of reasons to choose Kong:

  • Open Source with proper license
  • Support for DBless configuration
  • Easily configurable
  • Popular
  • Single container gateway when running in DBless mode

It will now be a required dependency that we use to expose the Dashboard. Users can then reconfigure it or use another proxy in front of it. It will simply act as a single point when accessing the Kubernetes Dashboard.

Metrics scraper
  • Changed sqlite Go dependency to used driver implementation that does not require CGO_ENABLED=1 during the build. It is a pure Go implementation.
Helm chart

This is a complete overhaul of the helm chart. It includes:

  • Added DBless, single-container kong deployment as a default gateway for the Kubernetes Dashboard. This is a required dependency.
  • Settings ConfigMap name/namespace is now configurable via values.yaml → web.settings.configMap entry.
  • Scaling configuration has been split to allow configuring replicas per every container separately.
  • Metrics scraper service name is no longer hardcoded in the API container. Its name is now generated similarly to other deployments/services.
  • CSRF key is now generated by the helm and imported as an env var into the containers. This allowed us to drop generation logic and direct dependency on this secret from code.
  • Image pull secrets are now properly respected by all deployments.
  • RBACs for every deployment have been separated to make sure that every container gets as little permissions as possible.
  • Ingress configuration has been updated to be more flexible:
    • Dashboard can now be served more easily on a subpath simply by enabling app.ingress.enabled=true and app.ingress.path=/dashboard. It would serve Dashboard on https://localhost/dashboard by default.
    • Default annotations can now be disabled via app.ingress.useDefaultAnnotations=false
    • ingressClassName can now be skipped from spec and it should fallback to using default ingress class (if configured). It is controlled by app.ingress.useDefaultIngressClass.
  • Helm chart now supports API only mode meaning that you can deploy only an API container. This can be achieved by below configuration:
    • app.mode=api
    • kong.enabled=false
    • Optionally you can also disable metrics with api.containers.args={--metrics-provider=none}
  • cert-manager, nginx and metrics-server are now disabled by default. Only kong dependency is required.
  • clusterReadOnlyRole has been removed since it is no longer possible to use Dashboard permissions to access the cluster. User access is required at all times.

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version 1.27 1.28 1.29
Compatibility ? ? ✓
  • ✓ Fully supported version range.
  • ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.2.0
docker.io/kubernetesui/dashboard-auth:1.1.0
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.0

What's Changed

  • Mostly things described in Breaking change
  • Dependency updates

Full Changelog: https://github.com/kubernetes/dashboard/compare/v3.0.0-alpha0...kubernetes-dashboard-7.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • [ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

funkypenguin-autochef avatar May 23 '24 11:05 funkypenguin-autochef