Restore dashboard --enable-skip-login
Skip-login was stripped in an earlier "harden security" pass, which is why the dashboard started demanding a token. Re-added it; it now runs as the dashboard's own view-only ServiceAccount (get/list/watch), so opening it needs no token but write access still requires the admin-user token as before. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
@@ -62,6 +62,13 @@ spec:
|
||||
args:
|
||||
- --auto-generate-certificates
|
||||
- --namespace=kubernetes-dashboard
|
||||
- --enable-skip-login
|
||||
# Skip-login uses the "kubernetes-dashboard" ServiceAccount below,
|
||||
# which only has get/list/watch (view-only) - so opening the
|
||||
# dashboard needs no token, but it can't edit/delete/exec.
|
||||
# For write access, still log in with the admin-user token
|
||||
# (kubectl -n kubernetes-dashboard create token admin-user).
|
||||
#
|
||||
# --token-ttl=0 was tried here to disable the 15-min idle
|
||||
# timeout, but login broke immediately after that pod came up -
|
||||
# in this dashboard version, 0 appears to mean "expire
|
||||
|
||||
Reference in New Issue
Block a user