Files
piKube/roles/dashboard/tasks/main.yml

65 lines
2.0 KiB
YAML

---
- name: Install Metrics Server
command: kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
environment:
KUBECONFIG: /etc/kubernetes/admin.conf
- name: Patch Metrics Server for self-signed certs (RPi workaround)
command: >
kubectl patch deployment metrics-server -n kube-system --type='json'
-p='[{"op": "add", "path": "/spec/template/spec/containers/0/args/-", "value": "--kubelet-insecure-tls"}]'
environment:
KUBECONFIG: /etc/kubernetes/admin.conf
- name: Install Kubernetes Dashboard
command: kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
environment:
KUBECONFIG: /etc/kubernetes/admin.conf
- name: Create Dashboard Admin Service Account
shell: |
cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: ServiceAccount
metadata:
name: admin-user
namespace: kubernetes-dashboard
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: admin-user
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: admin-user
namespace: kubernetes-dashboard
EOF
environment:
KUBECONFIG: /etc/kubernetes/admin.conf
- name: Create Dashboard Admin Token Secret (for K8s 1.24+)
shell: |
cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: Secret
metadata:
name: admin-user-token
namespace: kubernetes-dashboard
annotations:
kubernetes.io/service-account.name: admin-user
type: kubernetes.io/service-account-token
EOF
environment:
KUBECONFIG: /etc/kubernetes/admin.conf
- name: Change Dashboard service to NodePort
command: >
kubectl patch svc kubernetes-dashboard -n kubernetes-dashboard
-p '{"spec": {"type": "NodePort", "ports": [{"port": 443, "nodePort": 30443}]}}'
environment:
KUBECONFIG: /etc/kubernetes/admin.conf