Kubernetes Dashboard & 계정관리

microk8s enable dashboard

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: intra-kubernetes.도메인
  namespace: kube-system
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" // 아래 port가 443이면 https 80이면 http로 설정한다.
 
spec:
  tls:
  - hosts:
    - intra-kubernetes.도메인
    secretName: intra-kubernetes.도메인-tls
 
  rules:
  - host: intra-kubernetes.도메인
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: kubernetes-dashboard
            port:
              number: 443

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kube-system
 
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kube-system
 
---
apiVersion: v1
kind: Secret
metadata:
  name: admin-user-token
  namespace: kube-system
  annotations:
    kubernetes.io/service-account.name: admin-user
type: kubernetes.io/service-account-token