{"action":"opened","issue":{"url":"https://api.github.com/repos/Azure/acs-engine/issues/2425","repository_url":"https://api.github.com/repos/Azure/acs-engine","labels_url":"https://api.github.com/repos/Azure/acs-engine/issues/2425/labels{/name}","comments_url":"https://api.github.com/repos/Azure/acs-engine/issues/2425/comments","events_url":"https://api.github.com/repos/Azure/acs-engine/issues/2425/events","html_url":"https://github.com/Azure/acs-engine/issues/2425","id":303929579,"number":2425,"title":"Dashboard Service Account Role","user":{"login":"mattpetrick","id":18127355,"avatar_url":"https://avatars1.githubusercontent.com/u/18127355?v=4","gravatar_id":"","url":"https://api.github.com/users/mattpetrick","html_url":"https://github.com/mattpetrick","followers_url":"https://api.github.com/users/mattpetrick/followers","following_url":"https://api.github.com/users/mattpetrick/following{/other_user}","gists_url":"https://api.github.com/users/mattpetrick/gists{/gist_id}","starred_url":"https://api.github.com/users/mattpetrick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattpetrick/subscriptions","organizations_url":"https://api.github.com/users/mattpetrick/orgs","repos_url":"https://api.github.com/users/mattpetrick/repos","events_url":"https://api.github.com/users/mattpetrick/events{/privacy}","received_events_url":"https://api.github.com/users/mattpetrick/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-09T18:04:49Z","updated_at":"2018-03-09T18:04:49Z","closed_at":null,"author_association":"NONE","body":"<!-- Thanks for filing an issue! Before hitting the button, please answer these questions. It's helpful to search the existing GitHub issues first. It's likely that another user has already reported the issue you're facing, or it's a known issue that we're already aware of-->\r\n\r\n**Is this a request for help?**:\r\n\r\n---\r\n\r\n**Is this an ISSUE or FEATURE REQUEST?** (choose one): ISSUE\r\n\r\n---\r\n\r\n**What version of acs-engine?**: v0.13.0\r\n\r\n---\r\n\r\n\r\n<!--\r\nIf this is a ISSUE, please:\r\n  - Fill in as much of the template below as you can.  If you leave out\r\n    information, we can't help you as well.\r\n\r\nIf this is a FEATURE REQUEST, please:\r\n  - Describe *in detail* the feature/behavior/change you'd like to see.\r\n\r\nIn both cases, be ready for followup questions, and please respond in a timely\r\nmanner.  If we can't reproduce a bug or think a feature already exists, we\r\nmight close your issue.  If we're wrong, PLEASE feel free to reopen it and\r\nexplain why.\r\n-->\r\n\r\n**Orchestrator and version (e.g. Kubernetes, DC/OS, Swarm)**\r\n\r\nK8S v1.9.3\r\n\r\n**What happened**:\r\n\r\ndashboard service account running in cluster-admin role by default.\r\n\r\nhttps://github.com/Azure/acs-engine/blob/afbf71b97cb7e14518d67708f79efa757c32bcbb/parts/k8s/addons/kubernetesmasteraddons-kubernetes-dashboard-deployment.yaml\r\n\r\n**What you expected to happen**:\r\n\r\n\"As of release 1.7 Dashboard no longer has full admin privileges granted by default\" https://github.com/kubernetes/dashboard/wiki/Access-control \r\n\r\n**How to reproduce it** (as minimally and precisely as possible):\r\n\r\nhttps://github.com/Azure/acs-engine/blob/master/docs/kubernetes/deploy.md\r\n\r\n**Anything else we need to know**:\r\n\r\non the dashboard login screen clicking the \"Skip\" button correctly lets an unauthenticated user use the dashboard under the privileges of the dashboard SA. by default this would effectively be read-only view but because the SA is privileged as admin so is their access. currently no need for users to auth to their potentially lower privileges when they can just skip to admin."}}
{"actor":{"display_login":"mattpetrick"}}