Merge pull request #57326 from floreks/update-dashboard

Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. Update dashboard version to v1.8.3 **What this PR does / why we need it:** Updates dashboard addon to the latest version. Changelog can be found [here](https://github.com/kubernetes/dashboard/releases/tag/v1.8.3). **Release note**: ```release-note Update dashboard version to v1.8.3 ```

Merge pull request #57326 from floreks/update-dashboard
c19f8fce · Kubernetes Submit Queue · GitHub · 05425f08 · 85a537c9 · c19f8fce
Unverified Commit c19f8fce authored Feb 26, 2018 by Kubernetes Submit Queue Committed by GitHub Feb 26, 2018
4 changed files
--- a/cluster/addons/dashboard/OWNERS
+++ b/cluster/addons/dashboard/OWNERS
+approvers:
+- floreks
+- maciaszczykm
+reviewers:
+- floreks
+- maciaszczykm
--- a/cluster/addons/dashboard/dashboard-controller.yaml
+++ b/cluster/addons/dashboard/dashboard-controller.yaml
@@ -7,7 +7,7 @@ metadata:
  name: kubernetes-dashboard
  namespace: kube-system
 ---
-apiVersion: apps/v1beta2
+apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: kubernetes-dashboard
@@ -30,7 +30,7 @@ spec:
      priorityClassName: system-cluster-critical
      containers:
      - name: kubernetes-dashboard
-        image: k8s.gcr.io/kubernetes-dashboard-amd64:v1.8.0
+        image: k8s.gcr.io/kubernetes-dashboard-amd64:v1.8.3
        resources:
          limits:
            cpu: 100m
@@ -57,7 +57,8 @@ spec:
          timeoutSeconds: 30
      volumes:
      - name: kubernetes-dashboard-certs
-        emptyDir: {}
+        secret:
+          secretName: kubernetes-dashboard-certs
      - name: tmp-volume
        emptyDir: {}
      serviceAccountName: kubernetes-dashboard

--- a/cluster/addons/dashboard/dashboard-rbac.yaml
+++ b/cluster/addons/dashboard/dashboard-rbac.yaml
@@ -7,10 +7,6 @@ metadata:
  name: kubernetes-dashboard-minimal
  namespace: kube-system
 rules:
-  # Allow Dashboard to create 'kubernetes-dashboard-key-holder' secret.
- apiGroups: [""]
-  resources: ["secrets"]
-  verbs: ["create"]
  # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
 - apiGroups: [""]
  resources: ["secrets"]
@@ -26,6 +22,10 @@ rules:
  resources: ["services"]
  resourceNames: ["heapster"]
  verbs: ["proxy"]
+- apiGroups: [""]
+  resources: ["services/proxy"]
+  resourceNames: ["heapster", "http:heapster:", "https:heapster:"]
+  verbs: ["get"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

--- a/cluster/addons/dashboard/dashboard-secret.yaml
+++ b/cluster/addons/dashboard/dashboard-secret.yaml
@@ -8,3 +8,14 @@ metadata:
  name: kubernetes-dashboard-certs
  namespace: kube-system
 type: Opaque
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  labels:
+    k8s-app: kubernetes-dashboard
+    # Allows editing resource and makes sure it is created first.
+    addonmanager.kubernetes.io/mode: EnsureExists
+  name: kubernetes-dashboard-key-holder
+  namespace: kube-system
+type: Opaque