##背景
- Tokenを毎回ペーストするのが面倒だなぁと感じてなんとかpbcopy/pbpasteでtokenをブラウザーにParseできないのか調べてたところ、同僚からStagingだしenable-skip-login & disable-settings-authorizerを使えばいいと言われてやり方を調べました。
- dashboardのバージョンも上がってたのでついでにアップグレード。
##参考にした記事
Upgrade
enable-skip-login & disable-settings-authorizer
pbcopy&pbpaste
##v1.10.1 & v2.0.0-beta4のテスト
v1.10.1
metrics-server-amd64:v0.3.3
kubernetes-dashboard-amd64:v1.10.1
| Test1 [doesn’t work] | Test2 [Works] | Test3 [doesn’t work] |
|---|---|---|
| Just adding --enable-skip-login & --disable-settings-authorizer | adding --enable-skip-login & --disable-settings-authorizer & clusterrolebinding | Adding just clusterrolebinding |
| As of 1.7+ Dashboard no longer has full admin privileges granted by default.- |
v2.0.0-beta4
metrics-server-amd64:v0.3.4¥5
kubernetesui/metrics-scraper:v1.0.1
kubernetesui/dashboard:v2.0.0-beta4
| Test 4 [works] | Test 5 [doesn’t work] | Test 6 [works] |
|---|---|---|
| Deploy as it is | adding --enable-skip-login & --disable-settings-authorizer | adding --enable-skip-login & --disable-settings-authorizer + cluster-admin under roleRef |
Test 6を採用
##v1.10.1の気になる点
another thing to note for when we upgrade to kubernetes 1.16
https://github.com/kubernetes/dashboard/issues/4332
##見落としやすい点
| v1.10.1 | v2.0.0 | |
|---|---|---|
| eks-admin-service-account.yaml | Namespace: kube-system | Namespace: kube-system |
| kubernetes-dashboard.yaml | Namespace: kube-system | Namespace: kubernetes-dashboard |
| metrics-server/1.8+/ | Namespace: kube-system | Namespace: kube-system |
| URL | http://localhost:$PORT/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/ | http://localhost:$PORT/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/ |
##学んだこと
- dashboard設定方法
- token