| apiVersion: v1 |
| kind: ServiceAccount |
| metadata: |
| labels: |
| k8s-app: kubernetes-dashboard |
| addonmanager.kubernetes.io/mode: Reconcile |
| name: kubernetes-dashboard |
| namespace: kube-system |
| --- |
| apiVersion: apps/v1 |
| kind: Deployment |
| metadata: |
| name: kubernetes-dashboard |
| namespace: kube-system |
| labels: |
| k8s-app: kubernetes-dashboard |
| kubernetes.io/cluster-service: "true" |
| addonmanager.kubernetes.io/mode: Reconcile |
| spec: |
| selector: |
| matchLabels: |
| k8s-app: kubernetes-dashboard |
| template: |
| metadata: |
| labels: |
| k8s-app: kubernetes-dashboard |
| annotations: |
| scheduler.alpha.kubernetes.io/critical-pod: '' |
| seccomp.security.alpha.kubernetes.io/pod: 'docker/default' |
| spec: |
| priorityClassName: system-cluster-critical |
| containers: |
| - name: kubernetes-dashboard |
| image: k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.0 |
| resources: |
| limits: |
| cpu: 100m |
| memory: 300Mi |
| requests: |
| cpu: 50m |
| memory: 100Mi |
| ports: |
| - containerPort: 8443 |
| protocol: TCP |
| args: |
| # PLATFORM-SPECIFIC ARGS HERE |
| - --auto-generate-certificates |
| volumeMounts: |
| - name: kubernetes-dashboard-certs |
| mountPath: /certs |
| - name: tmp-volume |
| mountPath: /tmp |
| livenessProbe: |
| httpGet: |
| scheme: HTTPS |
| path: / |
| port: 8443 |
| initialDelaySeconds: 30 |
| timeoutSeconds: 30 |
| volumes: |
| - name: kubernetes-dashboard-certs |
| secret: |
| secretName: kubernetes-dashboard-certs |
| - name: tmp-volume |
| emptyDir: {} |
| serviceAccountName: kubernetes-dashboard |
| tolerations: |
| - key: "CriticalAddonsOnly" |
| operator: "Exists" |