Skip to content
This repository has been archived by the owner on Jan 11, 2023. It is now read-only.

Commit

Permalink
Support https for kubernetes-dashboard (#1947)
Browse files Browse the repository at this point in the history
  • Loading branch information
karataliu authored and jackfrancis committed Jan 3, 2018
1 parent c4604b1 commit a78a542
Showing 1 changed file with 95 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,95 @@
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
k8s-app: kubernetes-dashboard
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
name: kubernetes-dashboard
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: kubernetes-dashboard
labels:
k8s-app: kubernetes-dashboard
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: kubernetes-dashboard
namespace: kube-system
---
apiVersion: v1
kind: Service
metadata:
labels:
kubernetes.io/cluster-service: "true"
k8s-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kube-system
spec:
ports:
- port: 443
targetPort: 8443
selector:
k8s-app: kubernetes-dashboard
type: NodePort
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
labels:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
k8s-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kube-system
spec:
replicas: 1
selector:
matchLabels:
k8s-app: kubernetes-dashboard
template:
metadata:
labels:
k8s-app: kubernetes-dashboard
spec:
containers:
- args:
- --auto-generate-certificates
- --heapster-host=http://heapster.kube-system:80
image: <kubernetesDashboardSpec>
imagePullPolicy: Always
livenessProbe:
httpGet:
path: "/"
port: 8443
scheme: HTTPS
initialDelaySeconds: 30
timeoutSeconds: 30
name: kubernetes-dashboard
ports:
- containerPort: 8443
protocol: TCP
resources:
requests:
cpu: <kubernetesDashboardCPURequests>
memory: <kubernetesDashboardMemoryRequests>
limits:
cpu: <kubernetesDashboardCPULimit>
memory: <kubernetesDashboardMemoryLimit>
volumeMounts:
- name: kubernetes-dashboard-certs
mountPath: /certs
volumes:
- name: kubernetes-dashboard-certs
emptyDir: {}
serviceAccountName: kubernetes-dashboard
nodeSelector:
beta.kubernetes.io/os: linux

0 comments on commit a78a542

Please sign in to comment.