Merge branch 'master' of github.com:kubernetes/dashboard

Author: floreks

charts/kubernetes-dashboard/Chart.yaml

@@ -14,7 +14,7 @@
 
 apiVersion: v2
 name: kubernetes-dashboard
-version: 7.1.3
+version: 7.2.0
 description: General-purpose web UI for Kubernetes clusters
 keywords:
   - kubernetes

charts/kubernetes-dashboard/templates/_helpers.tpl

@@ -75,6 +75,16 @@ app.kubernetes.io/part-of: {{ include "kubernetes-dashboard.name" . }}
 {{- printf "private.key" }}
 {{- end -}}
 
+{{- define "kubernetes-dashboard.app.csrf.secret.value" -}}
+{{- $secretName := (include "kubernetes-dashboard.app.csrf.secret.name" .) -}}
+{{- $secret := lookup "v1" "Secret" .Release.Namespace $secretName -}}
+{{- if and $secret (hasKey $secret "data") (hasKey $secret.data "private.key") (index $secret.data "private.key") -}}
+private.key: {{ index $secret.data "private.key" }}
+{{- else -}}
+private.key: {{ randBytes 256 | b64enc | quote }}
+{{- end -}}
+{{- end -}}
+
 {{- define "kubernetes-dashboard.metrics-scraper.name" -}}
 {{- printf "%s-%s" ( include "kubernetes-dashboard.fullname" . ) ( .Values.metricsScraper.role )}}
 {{- end -}}

charts/kubernetes-dashboard/templates/deployments/api.yaml

@@ -46,8 +46,7 @@ spec:
         app.kubernetes.io/version: {{ .Values.api.image.tag }}
         app.kubernetes.io/component: {{ .Values.api.role }}
       annotations:
-        {{/* Ensure that the deployment is rolled on upgrade since CSRF key will be regenerated. */}}
-        rollme: {{ randAlphaNum 5 | quote }}
+        checksum/config: {{ include (print $.Template.BasePath "/secrets/csrf.yaml") . | sha256sum }}
         {{- with .Values.api.annotations }}
         {{ toYaml . | nindent 8 }}
         {{- end }}
@@ -112,6 +111,10 @@ spec:
       {{ toYaml . | nindent 8 }}
       {{- end }}
 
+      {{- with .Values.app.priorityClassName }}
+      priorityClassName: {{ . }}
+      {{- end }}
+
       {{- if or .Values.api.nodeSelector .Values.app.scheduling.nodeSelector }}
       nodeSelector:
       {{- with .Values.api.nodeSelector }}

charts/kubernetes-dashboard/templates/deployments/auth.yaml

@@ -49,8 +49,7 @@ spec:
         app.kubernetes.io/version: {{ .Values.auth.image.tag }}
         app.kubernetes.io/component: {{ .Values.auth.role }}
       annotations:
-        {{/* Ensure that the deployment is rolled on upgrade since CSRF key will be regenerated. */}}
-        rollme: {{ randAlphaNum 5 | quote }}
+        checksum/config: {{ include (print $.Template.BasePath "/secrets/csrf.yaml") . | sha256sum }}
         {{- with .Values.auth.annotations }}
         {{ toYaml . | nindent 8 }}
         {{- end }}
@@ -113,6 +112,10 @@ spec:
       {{ toYaml . | nindent 8 }}
       {{- end }}
 
+      {{- with .Values.app.priorityClassName }}
+      priorityClassName: {{ . }}
+      {{- end }}
+
       {{- if or .Values.auth.nodeSelector .Values.app.scheduling.nodeSelector }}
       nodeSelector:
       {{- with .Values.auth.nodeSelector }}

charts/kubernetes-dashboard/templates/deployments/metrics-scraper.yaml

@@ -110,6 +110,10 @@ spec:
       {{ toYaml . | nindent 8 }}
       {{- end }}
 
+      {{- with .Values.app.priorityClassName }}
+      priorityClassName: {{ . }}
+      {{- end }}
+
       {{- if or .Values.metricsScraper.nodeSelector .Values.app.scheduling.nodeSelector }}
       nodeSelector:
       {{- with .Values.metricsScraper.nodeSelector }}

charts/kubernetes-dashboard/templates/deployments/web.yaml

@@ -107,6 +107,10 @@ spec:
       {{ toYaml . | nindent 8 }}
       {{- end }}
 
+      {{- with .Values.app.priorityClassName }}
+      priorityClassName: {{ . }}
+      {{- end }}
+
       {{- if or .Values.web.nodeSelector .Values.app.scheduling.nodeSelector }}
       nodeSelector:
       {{- with .Values.web.nodeSelector }}

charts/kubernetes-dashboard/templates/secrets/csrf.yaml

@@ -19,4 +19,4 @@ metadata:
     {{- include "kubernetes-dashboard.labels" . | nindent 4 }}
   name: {{ template "kubernetes-dashboard.app.csrf.secret.name" . }}
 data:
-  {{ template "kubernetes-dashboard.app.csrf.secret.key" . }}: {{ randBytes 256 | b64enc | quote }}
+  {{ (include "kubernetes-dashboard.app.csrf.secret.value" . ) -}}

charts/kubernetes-dashboard/values.yaml

@@ -55,6 +55,8 @@ app:
   # Common labels & annotations shared across all deployed resources
   labels: {}
   annotations: {}
+  # Common priority class used for all deployed resources
+  priorityClassName: null
   settings:
     ## Global dashboard settings
     global:
@@ -143,7 +145,7 @@ auth:
       limits:
         cpu: 250m
         memory: 400Mi
-  automountServiceAccountToken: false
+  automountServiceAccountToken: true
   volumes:
     # Create on-disk volume to store exec logs (required)
     - name: tmp-volume
@@ -158,7 +160,7 @@ api:
   role: api
   image:
     repository: docker.io/kubernetesui/dashboard-api
-    tag: 1.4.0
+    tag: 1.4.1
   scaling:
     replicas: 1
     revisionHistoryLimit: 10
@@ -341,7 +343,7 @@ kong:
   enabled: true
   ## Configuration reference: https://docs.konghq.com/gateway/3.6.x/reference/configuration
   env:
-    dns_order: A,CNAME,LAST,SRV
+    dns_order: A,CNAME,LAST,AAAA,SRV
     plugins: 'off'
     nginx_worker_processes: 1
   ingressController: