diff --git a/kubernetes/talos/dashboard-adminuser.yaml b/kubernetes/talos/dashboard-adminuser.yaml new file mode 100644 index 0000000..5358337 --- /dev/null +++ b/kubernetes/talos/dashboard-adminuser.yaml @@ -0,0 +1,33 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: admin-user + namespace: kubernetes-dashboard + +--- + +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: admin-user +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: cluster-admin +subjects: +- kind: ServiceAccount + name: admin-user + namespace: kubernetes-dashboard + +--- + +apiVersion: v1 +kind: Secret +metadata: + name: admin-user + namespace: kubernetes-dashboard + annotations: + kubernetes.io/service-account.name: "admin-user" +type: kubernetes.io/service-account-token + +--- \ No newline at end of file diff --git a/kubernetes/talos/readme.md b/kubernetes/talos/readme.md index 8a70a95..3b4fab7 100644 --- a/kubernetes/talos/readme.md +++ b/kubernetes/talos/readme.md @@ -126,8 +126,13 @@ NOTE: In case port-forward command does not work, make sure that kong service na Dashboard will be available at: https://localhost:8443 -kubectl -n kubernetes-dashboard create serviceaccount kubernetes-dashboard -serviceaccount/kubernetes-dashboard created -kubectl -n kubernetes-dashboard create token kubernetes-dashboard + +# Create a service account for the dashboard +kubectl apply -f dashboard-adminuser.yaml +kubectl get secret admin-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d + +# kubectl -n kubernetes-dashboard create serviceaccount admin-user +# serviceaccount/kubernetes-dashboard created +kubectl -n kubernetes-dashboard create token admin-user ``` \ No newline at end of file