<p><a href="https://i.stack.imgur.com/4Tej0.png" rel="noreferrer"><img src="https://i.stack.imgur.com/4Tej0.png" alt="enter image description here"></a></p>

<p>I get "is forbidden" all over the dashboard site in Kubernetes*(See image)</p>

<p>To reproduce:</p>

<ol>
<li><p>Create a Google Kubernetes Cluster via the site, not from shell.</p></li>
<li><p>Select Kubernetes version 1.8.6</p></li>
<li><p>Open shell via the connect button: <code>gcloud container clusters get-credentials cluster-1 --zone us-central1-a --project awear-cloud</code></p></li>
<li><p><code>Kubectl proxy</code></p></li>
<li><code>echo http://127.0.0.1:8001/ui</code></li>
<li>click the link from <code>echo</code></li>
</ol>

<p>Note: also tried: <code>http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/</code></p>

<p>Do you know why?</p>

<p>1 - Create a file <strong>sa.yaml</strong> and paste the contents below into it.</p>

<pre><code>apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kube-system
</code></pre>

<p>2 - Apply it - <strong>kubectl apply -f sa.yaml</strong></p>

<p>3 - Create a file <strong>rbac.yaml</strong> and paste the contents below into it.</p>

<pre><code>apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kube-system
</code></pre>

<p>4 - Apply it - <strong>kubectl apply -f rbac.yaml</strong></p>

<p>5 - Now, <strong>login</strong> to your dashboard. </p>

<p>Let me know if this works. </p>
