{"action":"created","issue":{"url":"https://api.github.com/repos/aws-samples/aws-workshop-for-kubernetes/issues/508","repository_url":"https://api.github.com/repos/aws-samples/aws-workshop-for-kubernetes","labels_url":"https://api.github.com/repos/aws-samples/aws-workshop-for-kubernetes/issues/508/labels{/name}","comments_url":"https://api.github.com/repos/aws-samples/aws-workshop-for-kubernetes/issues/508/comments","events_url":"https://api.github.com/repos/aws-samples/aws-workshop-for-kubernetes/issues/508/events","html_url":"https://github.com/aws-samples/aws-workshop-for-kubernetes/issues/508","id":334643820,"node_id":"MDU6SXNzdWUzMzQ2NDM4MjA=","number":508,"title":"dashboard service-account must implement cluster-admin role for full dashboard access","user":{"login":"geremyCohen","id":1754064,"node_id":"MDQ6VXNlcjE3NTQwNjQ=","avatar_url":"https://avatars2.githubusercontent.com/u/1754064?v=4","gravatar_id":"","url":"https://api.github.com/users/geremyCohen","html_url":"https://github.com/geremyCohen","followers_url":"https://api.github.com/users/geremyCohen/followers","following_url":"https://api.github.com/users/geremyCohen/following{/other_user}","gists_url":"https://api.github.com/users/geremyCohen/gists{/gist_id}","starred_url":"https://api.github.com/users/geremyCohen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/geremyCohen/subscriptions","organizations_url":"https://api.github.com/users/geremyCohen/orgs","repos_url":"https://api.github.com/users/geremyCohen/repos","events_url":"https://api.github.com/users/geremyCohen/events{/privacy}","received_events_url":"https://api.github.com/users/geremyCohen/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-06-21T20:24:15Z","updated_at":"2018-09-11T19:46:36Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"https://github.com/aws-samples/aws-workshop-for-kubernetes/tree/master/02-path-working-with-clusters/201-cluster-monitoring#kubernetes-dashboard\r\n\r\nThe instructions for setting up the dashboard don't provide for full cluster access.\r\n\r\nThey should be modified to guide the user in provisioning/binding a cluster-admin-level role and retrieving the associated secret's token in order to login to the dashboard.  \r\n\r\nTo do this, we'll reference the steps documented here: https://docs.aws.amazon.com/eks/latest/userguide/dashboard-tutorial.html#eks-admin-service-account"},"comment":{"url":"https://api.github.com/repos/aws-samples/aws-workshop-for-kubernetes/issues/comments/420400237","html_url":"https://github.com/aws-samples/aws-workshop-for-kubernetes/issues/508#issuecomment-420400237","issue_url":"https://api.github.com/repos/aws-samples/aws-workshop-for-kubernetes/issues/508","id":420400237,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMDQwMDIzNw==","user":{"login":"gudavalli","id":5273240,"node_id":"MDQ6VXNlcjUyNzMyNDA=","avatar_url":"https://avatars1.githubusercontent.com/u/5273240?v=4","gravatar_id":"","url":"https://api.github.com/users/gudavalli","html_url":"https://github.com/gudavalli","followers_url":"https://api.github.com/users/gudavalli/followers","following_url":"https://api.github.com/users/gudavalli/following{/other_user}","gists_url":"https://api.github.com/users/gudavalli/gists{/gist_id}","starred_url":"https://api.github.com/users/gudavalli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gudavalli/subscriptions","organizations_url":"https://api.github.com/users/gudavalli/orgs","repos_url":"https://api.github.com/users/gudavalli/repos","events_url":"https://api.github.com/users/gudavalli/events{/privacy}","received_events_url":"https://api.github.com/users/gudavalli/received_events","type":"User","site_admin":false},"created_at":"2018-09-11T19:46:36Z","updated_at":"2018-09-11T19:46:36Z","author_association":"NONE","body":"Create a file called 'admin-cluster-role-binding.yaml' with the text below:\r\napiVersion: rbac.authorization.k8s.io/v1\r\nkind: ClusterRoleBinding\r\nmetadata:\r\n  name: kubernetes-dashboard\r\nroleRef:\r\n  apiGroup: rbac.authorization.k8s.io\r\n  kind: ClusterRole\r\n  name: cluster-admin\r\nsubjects:\r\n- kind: ServiceAccount\r\n  name: kubernetes-dashboard\r\n  namespace: kube-system\r\n\r\nApply the cluster role binding to your cluster:\r\n**kubectl apply -f admin-cluster-role-binding.yaml**\r\n\r\nOutput:\r\n_clusterrolebinding.rbac.authorization.k8s.io \"kubernetes-dashboard\" created_"}}
{"actor":{"display_login":"gudavalli"}}