How to Set Up a Secure Kubernetes Dashboard Without RBAC

Kubernetes Dashboard Configuration

Installation Preparation

Download the dashboard YAML file:

wget -O kube-dashboard.yaml https://git.io/kube-dashboard-no-rbac

This version does not include RBAC.

Prepare the image (requires internet access):

docker save gcr.io/google_containers/kubernetes-dashboard-amd64:v1.6.3 >1.6.3.tar
docker load < 1.6.3.tar
docker tag gcr.io/google_containers/kubernetes-dashboard-amd64:v1.6.3 harbor.biglittleant.cn/test/kubernetes-dashboard-amd64:v1.6.3

You need network connectivity; otherwise the dashboard image cannot be downloaded.

Modify the deployment to use the private image and set the API server address:

spec:
  containers:
  - name: kubernetes-dashboard
    image: harbor.biglittleant.cn/test/kubernetes-dashboard-amd64:v1.6.3
    ports:
    - containerPort: 9090
      protocol: TCP
    args:
      - --apiserver-host=http://192.168.56.12:8080

Update the image to the offline address and configure the apiserver-host.

Create the dashboard service: kubectl create -f kube-dashboard.yaml Verify that the service is running:

kubectl get services --all-namespaces
kube-system   kubernetes-dashboard   10.254.174.119   <none>        80/TCP   2d

Access the dashboard in a browser at http://192.168.56.12:8080/ui and view the screenshot below: