Skip to content

Commit 6dd2ce8

Browse files
UI: add step to create bearer token for kubernetes dashboard (#7764)
Since Kubernetes v1.24.0, there is no auto-generation of secret-based service account token due to security reason. see kubernetes/kubernetes#108309 To access kubernetes dashboard, users need to create a service account and an optional long-lived Bearer Token for the service account.
1 parent 6321642 commit 6dd2ce8

File tree

2 files changed

+7
-0
lines changed

2 files changed

+7
-0
lines changed

ui/public/locales/en.json

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1093,6 +1093,8 @@
10931093
"label.kubernetes.cluster.stop": "Stop Kubernetes cluster",
10941094
"label.kubernetes.cluster.upgrade": "Upgrade Kubernetes cluster",
10951095
"label.kubernetes.dashboard": "Kubernetes dashboard UI",
1096+
"label.kubernetes.dashboard.create.token": "Create token for Kubernetes dashboard",
1097+
"label.kubernetes.dashboard.create.token.desc": "Since Kubernetes v1.24.0, there is no auto-generation of secret-based service account token due to security reason. You need to create a service account and an optional long-lived Bearer Token for the service account.",
10961098
"label.kubernetes.isos": "Kubernetes ISOs",
10971099
"label.kubernetes.service": "Kubernetes service",
10981100
"label.kubernetes.version.add": "Add Kubernetes version",

ui/src/views/compute/KubernetesServiceTab.vue

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,11 @@
7979
<a href="http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/"><code>http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/</code></a>
8080
</p>
8181
</a-timeline-item>
82+
<a-timeline-item>
83+
<p v-html="$t('label.kubernetes.dashboard.create.token')"></p>
84+
<p v-html="$t('label.kubernetes.dashboard.create.token.desc')"></p>
85+
<a-textarea :value="'kubectl --kubeconfig /custom/path/kube.conf apply -f - <<EOF\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: kubernetes-dashboard-admin-user\n namespace: kubernetes-dashboard\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: kubernetes-dashboard-admin-user\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: cluster-admin\nsubjects:\n- kind: ServiceAccount\n name: kubernetes-dashboard-admin-user\n namespace: kubernetes-dashboard\n---\napiVersion: v1\nkind: Secret\ntype: kubernetes.io/service-account-token\nmetadata:\n name: kubernetes-dashboard-token\n namespace: kubernetes-dashboard\n annotations:\n kubernetes.io/service-account.name: kubernetes-dashboard-admin-user\nEOF'" :rows="10" readonly />
86+
</a-timeline-item>
8287
<a-timeline-item>
8388
<p>
8489
{{ $t('label.token.for.dashboard.login') }}<br><br>

0 commit comments

Comments
 (0)