feat(helm)!: Update chart kubernetes-dashboard to 7.1.1

[renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
kubernetes-dashboard	major	6.0.8 -> 7.1.1

---

Release Notes

kubernetes/dashboard (kubernetes-dashboard)

v7.1.1

Compare Source

What's changed

• fix: skip login screen when auth header is present by @​floreks in https://github.com/kubernetes/dashboard/pull/8762

Full Changelog: kubernetes/dashboard@auth/v1.1.1...kubernetes-dashboard-7.1.1

Auth

• add /api/v1/me endpoint with username and as an information if user was correctly authenticated

Web

• update auth header handling
• update user info panel with username from /me endpoint
• update login to skip login view when auth header is present

Helm Chart

• update gateway configuration to support /me endpoint routing

Installation

helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

Compatibility

Kubernetes version	1.27	1.28	1.29
Compatibility	?	?	✓

• ✓ Fully supported version range.
• ? Due to breaking changes between Kubernetes API versions, some features might not work correctly in the Dashboard.

Images

docker.io/kubernetesui/dashboard-api:1.2.0
docker.io/kubernetesui/dashboard-auth:1.1.1
docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
docker.io/kubernetesui/dashboard-web:1.2.2

v7.1.0

Compare Source

General-purpose web UI for Kubernetes clusters

v7.0.1

Compare Source

v7.0.0

TBD

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- kubernetes/apps/monitoring/kubernetes-dashboard/app Kustomization: flux-system/kubernetes-dashboard HelmRelease: monitoring/kubernetes-dashboard

+++ kubernetes/apps/monitoring/kubernetes-dashboard/app Kustomization: flux-system/kubernetes-dashboard HelmRelease: monitoring/kubernetes-dashboard

@@ -13,13 +13,13 @@

     spec:
       chart: kubernetes-dashboard
       sourceRef:
         kind: HelmRepository
         name: kubernetes-dashboard
         namespace: flux-system
-      version: 6.0.8
+      version: 7.1.1
   install:
     remediation:
       retries: 3
   interval: 30m
   maxHistory: 2
   uninstall:

[github-actions]

--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard

@@ -1,10 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-  name: kubernetes-dashboard
-
--- HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kubernetes-dashboard-settings

+++ HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kubernetes-dashboard-settings

@@ -1,11 +0,0 @@

----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-  name: kubernetes-dashboard-settings
-data: null
-
--- HelmRelease: monitoring/kubernetes-dashboard ClusterRole: monitoring/kubernetes-dashboard-metrics

+++ HelmRelease: monitoring/kubernetes-dashboard ClusterRole: monitoring/kubernetes-dashboard-metrics

@@ -1,20 +0,0 @@

----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: kubernetes-dashboard-metrics
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-rules:
-- apiGroups:
-  - metrics.k8s.io
-  resources:
-  - pods
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-
--- HelmRelease: monitoring/kubernetes-dashboard ClusterRoleBinding: monitoring/kubernetes-dashboard-metrics

+++ HelmRelease: monitoring/kubernetes-dashboard ClusterRoleBinding: monitoring/kubernetes-dashboard-metrics

@@ -1,18 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: kubernetes-dashboard-metrics
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kubernetes-dashboard-metrics
-subjects:
-- kind: ServiceAccount
-  name: kubernetes-dashboard
-  namespace: monitoring
-
--- HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard

@@ -1,53 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  resourceNames:
-  - kubernetes-dashboard-key-holder
-  - kubernetes-dashboard-certs
-  - kubernetes-dashboard-csrf
-  verbs:
-  - get
-  - update
-  - delete
-- apiGroups:
-  - ''
-  resources:
-  - configmaps
-  resourceNames:
-  - kubernetes-dashboard-settings
-  verbs:
-  - get
-  - update
-- apiGroups:
-  - ''
-  resources:
-  - services
-  resourceNames:
-  - heapster
-  - dashboard-metrics-scraper
-  verbs:
-  - proxy
-- apiGroups:
-  - ''
-  resources:
-  - services/proxy
-  resourceNames:
-  - heapster
-  - 'http:heapster:'
-  - 'https:heapster:'
-  - dashboard-metrics-scraper
-  - http:dashboard-metrics-scraper
-  verbs:
-  - get
-
--- HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard

@@ -1,18 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: kubernetes-dashboard
-subjects:
-- kind: ServiceAccount
-  name: kubernetes-dashboard
-  namespace: monitoring
-
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard

@@ -1,22 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/component: kubernetes-dashboard
-    kubernetes.io/cluster-service: 'true'
-spec:
-  type: ClusterIP
-  ports:
-  - port: 443
-    targetPort: https
-    name: https
-  selector:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/component: kubernetes-dashboard
-
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard

@@ -1,109 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/component: kubernetes-dashboard
-spec:
-  replicas: 1
-  strategy:
-    rollingUpdate:
-      maxSurge: 0
-      maxUnavailable: 1
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: kubernetes-dashboard
-      app.kubernetes.io/instance: kubernetes-dashboard
-      app.kubernetes.io/component: kubernetes-dashboard
-  template:
-    metadata:
-      annotations: null
-      labels:
-        app.kubernetes.io/name: kubernetes-dashboard
-        app.kubernetes.io/instance: kubernetes-dashboard
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/component: kubernetes-dashboard
-    spec:
-      securityContext:
-        runAsNonRoot: true
-        seccompProfile:
-          type: RuntimeDefault
-      serviceAccountName: kubernetes-dashboard
-      containers:
-      - name: kubernetes-dashboard
-        image: kubernetesui/dashboard:v2.7.0
-        imagePullPolicy: IfNotPresent
-        args:
-        - --namespace=monitoring
-        - --auto-generate-certificates
-        - --sidecar-host=http://127.0.0.1:8000
-        - --enable-insecure-login
-        - --enable-skip-login
-        - --disable-settings-authorizer
-        ports:
-        - name: https
-          containerPort: 8443
-          protocol: TCP
-        volumeMounts:
-        - name: kubernetes-dashboard-certs
-          mountPath: /certs
-        - mountPath: /tmp
-          name: tmp-volume
-        livenessProbe:
-          httpGet:
-            scheme: HTTPS
-            path: /
-            port: 8443
-          initialDelaySeconds: 30
-          timeoutSeconds: 30
-        resources:
-          limits:
-            cpu: 2
-            memory: 200Mi
-          requests:
-            cpu: 100m
-            memory: 200Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsGroup: 2001
-          runAsUser: 1001
-      - name: dashboard-metrics-scraper
-        image: kubernetesui/metrics-scraper:v1.0.9
-        imagePullPolicy: IfNotPresent
-        ports:
-        - containerPort: 8000
-          protocol: TCP
-        livenessProbe:
-          httpGet:
-            scheme: HTTP
-            path: /
-            port: 8000
-          initialDelaySeconds: 30
-          timeoutSeconds: 30
-        volumeMounts:
-        - mountPath: /tmp
-          name: tmp-volume
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsGroup: 2001
-          runAsUser: 1001
-      volumes:
-      - name: kubernetes-dashboard-certs
-        secret:
-          secretName: kubernetes-dashboard-certs
-      - name: tmp-volume
-        emptyDir: {}
-
--- HelmRelease: monitoring/kubernetes-dashboard Ingress: monitoring/kubernetes-dashboard

+++ HelmRelease: monitoring/kubernetes-dashboard Ingress: monitoring/kubernetes-dashboard

@@ -1,30 +0,0 @@

----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: kubernetes-dashboard
-  labels:
-    app.kubernetes.io/name: kubernetes-dashboard
-    app.kubernetes.io/instance: kubernetes-dashboard
-    app.kubernetes.io/managed-by: Helm
-  annotations:
-    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
-    service.alpha.kubernetes.io/app-protocols: '{"https":"HTTPS"}'
-    hajimari.io/icon: mdi:kubernetes
-spec:
-  ingressClassName: internal
-  rules:
-  - host: kubernetes.${SECRET_DOMAIN}
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: kubernetes-dashboard
-            port:
-              number: 443
-  tls:
-  - hosts:
-    - kubernetes.${SECRET_DOMAIN}
-
--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-kong

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-kong

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kubernetes-dashboard-kong
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-api
+
--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-metrics-scraper
+
--- HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard ServiceAccount: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-web
+
--- HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kong-dbless-config

+++ HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kong-dbless-config

@@ -0,0 +1,53 @@

+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kong-dbless-config
+data:
+  kong.yml: |
+    _format_version: "3.0"
+    services:
+      - name: auth
+        host: kubernetes-dashboard-auth
+        port: 8000
+        protocol: http
+        routes:
+          - name: authLogin
+            paths:
+              - /api/v1/login
+            strip_path: false
+          - name: authCsrf
+            paths:
+              - /api/v1/csrftoken/login
+            strip_path: false
+          - name: authMe
+            paths:
+              - /api/v1/me
+            strip_path: false
+      - name: api
+        host: kubernetes-dashboard-api
+        port: 8000
+        protocol: http
+        routes:
+          - name: api
+            paths:
+              - /api
+            strip_path: false
+          - name: metrics
+            paths:
+              - /metrics
+            strip_path: false
+      - name: web
+        host: kubernetes-dashboard-web
+        port: 8000
+        protocol: http
+        routes:
+          - name: root
+            paths:
+              - /
+            strip_path: false
+
--- HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kubernetes-dashboard-web-settings

+++ HelmRelease: monitoring/kubernetes-dashboard ConfigMap: monitoring/kubernetes-dashboard-web-settings

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-web-settings
+data: null
+
--- HelmRelease: monitoring/kubernetes-dashboard ClusterRole: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard ClusterRole: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,20 @@

+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-metrics-scraper
+rules:
+- apiGroups:
+  - metrics.k8s.io
+  resources:
+  - pods
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch
+
--- HelmRelease: monitoring/kubernetes-dashboard ClusterRoleBinding: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard ClusterRoleBinding: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-metrics-scraper
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: kubernetes-dashboard-metrics-scraper
+subjects:
+- kind: ServiceAccount
+  name: kubernetes-dashboard-metrics-scraper
+  namespace: monitoring
+
--- HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,20 @@

+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-api
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - services/proxy
+  resourceNames:
+  - kubernetes-dashboard-metrics-scraper
+  - http:kubernetes-dashboard-metrics-scraper
+  verbs:
+  - get
+
--- HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard Role: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,20 @@

+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-web
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  resourceNames:
+  - kubernetes-dashboard-web-settings
+  verbs:
+  - get
+  - update
+
--- HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,17 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-api
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: kubernetes-dashboard-api
+subjects:
+- kind: ServiceAccount
+  name: kubernetes-dashboard-api
+
--- HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard RoleBinding: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,17 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+  name: kubernetes-dashboard-web
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: kubernetes-dashboard-web
+subjects:
+- kind: ServiceAccount
+  name: kubernetes-dashboard-web
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-kong-manager

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-kong-manager

@@ -0,0 +1,26 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kubernetes-dashboard-kong-manager
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: NodePort
+  ports:
+  - name: kong-manager
+    port: 8002
+    targetPort: 8002
+    protocol: TCP
+  - name: kong-manager-tls
+    port: 8445
+    targetPort: 8445
+    protocol: TCP
+  selector:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/component: app
+    app.kubernetes.io/instance: kubernetes-dashboard
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-kong-proxy

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-kong-proxy

@@ -0,0 +1,23 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kubernetes-dashboard-kong-proxy
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    enable-metrics: 'true'
+spec:
+  type: ClusterIP
+  ports:
+  - name: kong-proxy-tls
+    port: 443
+    targetPort: 8443
+    protocol: TCP
+  selector:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/component: app
+    app.kubernetes.io/instance: kubernetes-dashboard
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,20 @@

+---
+kind: Service
+apiVersion: v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-api
+    app.kubernetes.io/component: api
+  name: kubernetes-dashboard-api
+spec:
+  ports:
+  - name: api
+    port: 8000
+  selector:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-api
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-auth

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-auth

@@ -0,0 +1,20 @@

+---
+kind: Service
+apiVersion: v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-auth
+    app.kubernetes.io/component: auth
+  name: kubernetes-dashboard-auth
+spec:
+  ports:
+  - name: auth
+    port: 8000
+  selector:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-auth
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,19 @@

+---
+kind: Service
+apiVersion: v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+    app.kubernetes.io/component: metrics-scraper
+  name: kubernetes-dashboard-metrics-scraper
+spec:
+  ports:
+  - port: 8000
+  selector:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+
--- HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard Service: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,20 @@

+---
+kind: Service
+apiVersion: v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-web
+    app.kubernetes.io/component: web
+  name: kubernetes-dashboard-web
+spec:
+  ports:
+  - name: web
+    port: 8000
+  selector:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-web
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-kong

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-kong

@@ -0,0 +1,250 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kubernetes-dashboard-kong
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/name: kong
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: app
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: kong
+      app.kubernetes.io/component: app
+      app.kubernetes.io/instance: kubernetes-dashboard
+  template:
+    metadata:
+      annotations:
+        kuma.io/service-account-token-volume: kubernetes-dashboard-kong-token
+        kuma.io/gateway: enabled
+        traffic.sidecar.istio.io/includeInboundPorts: ''
+      labels:
+        app.kubernetes.io/name: kong
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/component: app
+        app: kubernetes-dashboard-kong
+        version: '3.6'
+    spec:
+      serviceAccountName: kubernetes-dashboard-kong
+      automountServiceAccountToken: false
+      initContainers:
+      - name: clear-stale-pid
+        image: kong:3.6
+        imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
+        resources: {}
+        command:
+        - rm
+        - -vrf
+        - $KONG_PREFIX/pids
+        env:
+        - name: KONG_ADMIN_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_GUI_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_GUI_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_LISTEN
+          value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
+        - name: KONG_CLUSTER_LISTEN
+          value: 'off'
+        - name: KONG_DATABASE
+          value: 'off'
+        - name: KONG_DECLARATIVE_CONFIG
+          value: /kong_dbless/kong.yml
+        - name: KONG_DNS_ORDER
+          value: LAST,A,SRV,CNAME
+        - name: KONG_LUA_PACKAGE_PATH
+          value: /opt/?.lua;/opt/?/init.lua;;
+        - name: KONG_NGINX_WORKER_PROCESSES
+          value: '2'
+        - name: KONG_PORTAL_API_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_PORTAL_API_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_PORT_MAPS
+          value: 443:8443
+        - name: KONG_PREFIX
+          value: /kong_prefix/
+        - name: KONG_PROXY_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_PROXY_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_PROXY_LISTEN
+          value: 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
+        - name: KONG_PROXY_STREAM_ACCESS_LOG
+          value: /dev/stdout basic
+        - name: KONG_PROXY_STREAM_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ROUTER_FLAVOR
+          value: traditional
+        - name: KONG_STATUS_ACCESS_LOG
+          value: 'off'
+        - name: KONG_STATUS_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_STATUS_LISTEN
+          value: 0.0.0.0:8100, [::]:8100
+        - name: KONG_STREAM_LISTEN
+          value: 'off'
+        volumeMounts:
+        - name: kubernetes-dashboard-kong-prefix-dir
+          mountPath: /kong_prefix/
+        - name: kubernetes-dashboard-kong-tmp
+          mountPath: /tmp
+        - name: kong-custom-dbless-config-volume
+          mountPath: /kong_dbless/
+      containers:
+      - name: proxy
+        image: kong:3.6
+        imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
+        env:
+        - name: KONG_ADMIN_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_GUI_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_GUI_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_LISTEN
+          value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
+        - name: KONG_CLUSTER_LISTEN
+          value: 'off'
+        - name: KONG_DATABASE
+          value: 'off'
+        - name: KONG_DECLARATIVE_CONFIG
+          value: /kong_dbless/kong.yml
+        - name: KONG_DNS_ORDER
+          value: LAST,A,SRV,CNAME
+        - name: KONG_LUA_PACKAGE_PATH
+          value: /opt/?.lua;/opt/?/init.lua;;
+        - name: KONG_NGINX_WORKER_PROCESSES
+          value: '2'
+        - name: KONG_PORTAL_API_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_PORTAL_API_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_PORT_MAPS
+          value: 443:8443
+        - name: KONG_PREFIX
+          value: /kong_prefix/
+        - name: KONG_PROXY_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_PROXY_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_PROXY_LISTEN
+          value: 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
+        - name: KONG_PROXY_STREAM_ACCESS_LOG
+          value: /dev/stdout basic
+        - name: KONG_PROXY_STREAM_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ROUTER_FLAVOR
+          value: traditional
+        - name: KONG_STATUS_ACCESS_LOG
+          value: 'off'
+        - name: KONG_STATUS_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_STATUS_LISTEN
+          value: 0.0.0.0:8100, [::]:8100
+        - name: KONG_STREAM_LISTEN
+          value: 'off'
+        - name: KONG_NGINX_DAEMON
+          value: 'off'
+        lifecycle:
+          preStop:
+            exec:
+              command:
+              - kong
+              - quit
+              - --wait=15
+        ports:
+        - name: proxy-tls
+          containerPort: 8443
+          protocol: TCP
+        - name: status
+          containerPort: 8100
+          protocol: TCP
+        volumeMounts:
+        - name: kubernetes-dashboard-kong-prefix-dir
+          mountPath: /kong_prefix/
+        - name: kubernetes-dashboard-kong-tmp
+          mountPath: /tmp
+        - name: kong-custom-dbless-config-volume
+          mountPath: /kong_dbless/
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /status/ready
+            port: status
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /status
+            port: status
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        resources: {}
+      securityContext: {}
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: kubernetes-dashboard-kong-prefix-dir
+        emptyDir:
+          sizeLimit: 256Mi
+      - name: kubernetes-dashboard-kong-tmp
+        emptyDir:
+          sizeLimit: 1Gi
+      - name: kubernetes-dashboard-kong-token
+        projected:
+          sources:
+          - serviceAccountToken:
+              expirationSeconds: 3607
+              path: token
+          - configMap:
+              items:
+              - key: ca.crt
+                path: ca.crt
+              name: kube-root-ca.crt
+          - downwardAPI:
+              items:
+              - fieldRef:
+                  apiVersion: v1
+                  fieldPath: metadata.namespace
+                path: namespace
+      - name: kong-custom-dbless-config-volume
+        configMap:
+          name: kong-dbless-config
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-api

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-api

@@ -0,0 +1,74 @@

+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-api
+    app.kubernetes.io/component: api
+  name: kubernetes-dashboard-api
+spec:
+  replicas: 3
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: kubernetes-dashboard
+      app.kubernetes.io/part-of: kubernetes-dashboard
+      app.kubernetes.io/name: kubernetes-dashboard-api
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/part-of: kubernetes-dashboard
+        app.kubernetes.io/name: kubernetes-dashboard-api
+        app.kubernetes.io/component: api
+      annotations:
+        rollme: iUQDd
+    spec:
+      containers:
+      - name: kubernetes-dashboard-api
+        image: docker.io/kubernetesui/dashboard-api:1.2.0
+        imagePullPolicy: IfNotPresent
+        args:
+        - --namespace=monitoring
+        - --metrics-scraper-service-name=kubernetes-dashboard-metrics-scraper
+        env:
+        - name: CSRF_KEY
+          valueFrom:
+            secretKeyRef:
+              name: kubernetes-dashboard-csrf
+              key: private.key
+        ports:
+        - containerPort: 8000
+          name: api
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 2001
+          runAsUser: 1001
+        resources:
+          limits:
+            cpu: 250m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 200Mi
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp-volume
+      serviceAccountName: kubernetes-dashboard-api
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-auth

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-auth

@@ -0,0 +1,71 @@

+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-auth
+    app.kubernetes.io/component: auth
+  name: kubernetes-dashboard-auth
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: kubernetes-dashboard
+      app.kubernetes.io/part-of: kubernetes-dashboard
+      app.kubernetes.io/name: kubernetes-dashboard-auth
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/part-of: kubernetes-dashboard
+        app.kubernetes.io/name: kubernetes-dashboard-auth
+        app.kubernetes.io/component: auth
+      annotations:
+        rollme: 20qMO
+    spec:
+      containers:
+      - name: kubernetes-dashboard-auth
+        image: docker.io/kubernetesui/dashboard-auth:1.1.1
+        imagePullPolicy: IfNotPresent
+        args: null
+        env:
+        - name: CSRF_KEY
+          valueFrom:
+            secretKeyRef:
+              name: kubernetes-dashboard-csrf
+              key: private.key
+        ports:
+        - containerPort: 8000
+          name: auth
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 2001
+          runAsUser: 1001
+        resources:
+          limits:
+            cpu: 250m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 200Mi
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp-volume
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-metrics-scraper

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-metrics-scraper

@@ -0,0 +1,70 @@

+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+    app.kubernetes.io/component: metrics-scraper
+  name: kubernetes-dashboard-metrics-scraper
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: kubernetes-dashboard
+      app.kubernetes.io/part-of: kubernetes-dashboard
+      app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/part-of: kubernetes-dashboard
+        app.kubernetes.io/name: kubernetes-dashboard-metrics-scraper
+        app.kubernetes.io/component: metrics-scraper
+      annotations: null
+    spec:
+      containers:
+      - name: kubernetes-dashboard-metrics-scraper
+        image: docker.io/kubernetesui/dashboard-metrics-scraper:1.1.1
+        imagePullPolicy: IfNotPresent
+        ports:
+        - containerPort: 8000
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 2001
+          runAsUser: 1001
+        resources:
+          limits:
+            cpu: 250m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 200Mi
+        livenessProbe:
+          httpGet:
+            path: /
+            port: 8000
+            scheme: HTTP
+          initialDelaySeconds: 30
+          timeoutSeconds: 30
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp-volume
+      serviceAccountName: kubernetes-dashboard-metrics-scraper
+
--- HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-web

+++ HelmRelease: monitoring/kubernetes-dashboard Deployment: monitoring/kubernetes-dashboard-web

@@ -0,0 +1,67 @@

+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  labels:
+    app.kubernetes.io/instance: kubernetes-dashboard
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: kubernetes-dashboard
+    app.kubernetes.io/name: kubernetes-dashboard-web
+    app.kubernetes.io/component: web
+  name: kubernetes-dashboard-web
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: kubernetes-dashboard
+      app.kubernetes.io/part-of: kubernetes-dashboard
+      app.kubernetes.io/name: kubernetes-dashboard-web
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: kubernetes-dashboard
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/part-of: kubernetes-dashboard
+        app.kubernetes.io/name: kubernetes-dashboard-web
+        app.kubernetes.io/component: web
+      annotations: null
+    spec:
+      containers:
+      - name: kubernetes-dashboard-web
+        image: docker.io/kubernetesui/dashboard-web:1.2.2
+        imagePullPolicy: IfNotPresent
+        args:
+        - --namespace=monitoring
+        - --settings-config-map-name=kubernetes-dashboard-web-settings
+        ports:
+        - containerPort: 8000
+          name: web
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 2001
+          runAsUser: 1001
+        resources:
+          limits:
+            cpu: 250m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 200Mi
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp-volume
+      serviceAccountName: kubernetes-dashboard-web
+