From b7423a9208e61eee005739c39a34668d51648a7a Mon Sep 17 00:00:00 2001
From: caelebfi <gorden.mende@solusar.de>
Date: Fri, 19 Jul 2024 16:19:15 +0200
Subject: [PATCH] added bearer token

---
 kubernetes-dashboard/admin-user               |  1 +
 .../ing-dashboard.yaml                        |  8 ++++++
 .../kubedash.realm.local/cert.pem             | 20 +++++++++++++
 .../kubedash.realm.local/key.pem              | 28 +++++++++++++++++++
 kubernetes-dashboard/rbac-dashboard.yaml      | 12 ++++++++
 kubernetes-dashboard/sa-dashboard.yaml        |  5 ++++
 6 files changed, 74 insertions(+)
 create mode 100644 kubernetes-dashboard/admin-user
 rename {ingress => kubernetes-dashboard}/ing-dashboard.yaml (67%)
 create mode 100644 kubernetes-dashboard/kubedash.realm.local/cert.pem
 create mode 100644 kubernetes-dashboard/kubedash.realm.local/key.pem
 create mode 100644 kubernetes-dashboard/rbac-dashboard.yaml
 create mode 100644 kubernetes-dashboard/sa-dashboard.yaml

diff --git a/kubernetes-dashboard/admin-user b/kubernetes-dashboard/admin-user
new file mode 100644
index 0000000..127ca20
--- /dev/null
+++ b/kubernetes-dashboard/admin-user
@@ -0,0 +1 @@
+eyJhbGciOiJSUzI1NiIsImtpZCI6IjluZGx6M2dVYzdFb0lLX19lbXRPclJTQVVZNTZ0eXYyQVptX3ZuOFdqRHMifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjLmNsdXN0ZXIubG9jYWwiXSwiZXhwIjoxNzIxNDAyMDk2LCJpYXQiOjE3MjEzOTg0OTYsImlzcyI6Imh0dHBzOi8va3ViZXJuZXRlcy5kZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsIiwia3ViZXJuZXRlcy5pbyI6eyJuYW1lc3BhY2UiOiJrdWJlcm5ldGVzLWRhc2hib2FyZCIsInNlcnZpY2VhY2NvdW50Ijp7Im5hbWUiOiJhZG1pbi11c2VyIiwidWlkIjoiNTk1NDU1NTctOTUyYy00MzIwLTk3NGUtYmY1MDQ5ZmZhZTY1In19LCJuYmYiOjE3MjEzOTg0OTYsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDprdWJlcm5ldGVzLWRhc2hib2FyZDphZG1pbi11c2VyIn0.CUNwFvIublVBGOC85oQ10VSMFJEfEosBl4HskuZoHbs7w5Wx9lfsh08B2Ovseh4TrHZOnK8MeWBuFEvlMCPxCUdqTw7Bx1s7wkiGxO0TuP29wtjhj7CfjO8QrhPh3rtxi63uyOXigUO9q8wtfr5w7anW2MdEI8PRre82WbOyR8JvpYPyOGyoxvem5g-UpbZsibS_erODU9yDq4EMjD0FZCItJdcbgN6U_agfh1yBL463-BrGtSmrAAdcPnnOSOWvBxHKltXpCpRk6OO_vXy693SemaY8rs8_F0QdviZjBmofY7e64zCCo0qtiH1mZCM3_fOISMeZJ14ras4fucXxwg
diff --git a/ingress/ing-dashboard.yaml b/kubernetes-dashboard/ing-dashboard.yaml
similarity index 67%
rename from ingress/ing-dashboard.yaml
rename to kubernetes-dashboard/ing-dashboard.yaml
index 418e82e..f83f8b4 100644
--- a/ingress/ing-dashboard.yaml
+++ b/kubernetes-dashboard/ing-dashboard.yaml
@@ -6,8 +6,16 @@ metadata:
     app.kubernetes.io/name: kubernetes-dashboard
   name: kubernetes-dashboard
   namespace: kubernetes-dashboard
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
 spec:
   ingressClassName: nginx
+  tls:
+  - hosts:
+    - kubedash.realm.local
+    secretName: kubedash-cert
   rules:
   - host: kubedash.realm.local
     http:
diff --git a/kubernetes-dashboard/kubedash.realm.local/cert.pem b/kubernetes-dashboard/kubedash.realm.local/cert.pem
new file mode 100644
index 0000000..c7e80ef
--- /dev/null
+++ b/kubernetes-dashboard/kubedash.realm.local/cert.pem
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/kubernetes-dashboard/kubedash.realm.local/key.pem b/kubernetes-dashboard/kubedash.realm.local/key.pem
new file mode 100644
index 0000000..d629470
--- /dev/null
+++ b/kubernetes-dashboard/kubedash.realm.local/key.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/kubernetes-dashboard/rbac-dashboard.yaml b/kubernetes-dashboard/rbac-dashboard.yaml
new file mode 100644
index 0000000..6db3be5
--- /dev/null
+++ b/kubernetes-dashboard/rbac-dashboard.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: admin-user
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: admin-user
+  namespace: kubernetes-dashboard
diff --git a/kubernetes-dashboard/sa-dashboard.yaml b/kubernetes-dashboard/sa-dashboard.yaml
new file mode 100644
index 0000000..54cabb7
--- /dev/null
+++ b/kubernetes-dashboard/sa-dashboard.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: admin-user
+  namespace: kubernetes-dashboard