mirror of
https://github.com/jcwimer/kubernetes-ansible
synced 2026-03-24 16:44:44 +00:00
22 lines
761 B
Bash
22 lines
761 B
Bash
#!/bin/bash
|
|
|
|
# https://blog.heptio.com/on-securing-the-kubernetes-dashboard-16b09b1b7aca
|
|
# kubectl -n kube-system edit service kubernetes-dashboard
|
|
|
|
# Change dashboard to node port
|
|
kubectl -n kube-system get service kubernetes-dashboard -o yaml | \
|
|
sed 's/type: ClusterIP/type: NodePort/g' | \
|
|
kubectl apply -f -
|
|
|
|
# Create the service account in the current namespace
|
|
# (we assume default)
|
|
kubectl create serviceaccount my-dashboard-sa
|
|
|
|
# Give that service account root on the cluster
|
|
kubectl create clusterrolebinding my-dashboard-sa \
|
|
--clusterrole=cluster-admin \
|
|
--serviceaccount=default:my-dashboard-sa
|
|
|
|
# Get secret token
|
|
kubectl describe secret $(kubectl get secret | grep my-dashboard-sa | awk '{print $1}') | grep 'token:' | awk {'print $2'}
|