Restore dashboard --enable-skip-login

Skip-login was stripped in an earlier "harden security" pass, which is
why the dashboard started demanding a token. Re-added it; it now runs
as the dashboard's own view-only ServiceAccount (get/list/watch), so
opening it needs no token but write access still requires the
admin-user token as before.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Suriya
2026-07-20 12:37:59 +05:30
parent dd5dfe10f7
commit cde7d4b84b
2 changed files with 12 additions and 3 deletions

View File

@@ -62,6 +62,13 @@ spec:
args:
- --auto-generate-certificates
- --namespace=kubernetes-dashboard
- --enable-skip-login
# Skip-login uses the "kubernetes-dashboard" ServiceAccount below,
# which only has get/list/watch (view-only) - so opening the
# dashboard needs no token, but it can't edit/delete/exec.
# For write access, still log in with the admin-user token
# (kubectl -n kubernetes-dashboard create token admin-user).
#
# --token-ttl=0 was tried here to disable the 15-min idle
# timeout, but login broke immediately after that pod came up -
# in this dashboard version, 0 appears to mean "expire