<p>I've just created a new kubernetes cluster. The only thing I have done beyond set up the cluster is install Tiller using <code>helm init</code> and install kubernetes dashboard through <code>helm install stable/kubernetes-dashboard</code>.</p>

<p>The <code>helm install</code> command seems to be successful and <code>helm ls</code> outputs:</p>

<pre><code>NAME                    REVISION        UPDATED                         STATUS          CHART                           APP VERSION     NAMESPACE
exhaling-ladybug        1               Thu Oct 24 16:56:49 2019        DEPLOYED        kubernetes-dashboard-1.10.0     1.10.1          default  
</code></pre>

<p>However after waiting a few minutes the deployment is still not ready. </p>

<p>Running <code>kubectl get pods</code> shows that the pod's status as <code>CrashLoopBackOff</code>.</p>

<pre><code>NAME                                    READY   STATUS             RESTARTS   AGE
exhaling-ladybug-kubernetes-dashboard   0/1     CrashLoopBackOff   10         31m
</code></pre>

<p>The description for the pod shows the following events:</p>

<pre><code>Events:
  Type     Reason     Age                   From                 Message
  ----     ------     ----                  ----                 -------
  Normal   Scheduled  31m                   default-scheduler    Successfully assigned default/exhaling-ladybug-kubernetes-dashboard to nodes-1
  Normal   Pulling    31m                   kubelet, nodes-1     Pulling image "k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.1"
  Normal   Pulled     31m                   kubelet, nodes-1     Successfully pulled image "k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.1"
  Normal   Started    30m (x4 over 31m)     kubelet, nodes-1     Started container kubernetes-dashboard
  Normal   Pulled     30m (x4 over 31m)     kubelet, nodes-1     Container image "k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.1" already present on machine
  Normal   Created    30m (x5 over 31m)     kubelet, nodes-1     Created container kubernetes-dashboard
  Warning  BackOff    107s (x141 over 31m)  kubelet, nodes-1     Back-off restarting failed container
</code></pre>

<p>And the logs show the following panic message</p>

<pre><code>panic: secrets is forbidden: User "system:serviceaccount:default:exhaling-ladybug-kubernetes-dashboard" cannot create resource "secrets" in API group "" in the namespace "kube-system"
</code></pre>

<p>Am I doing something wrong? Why is it trying to create a secret somewhere it cannot?</p>

<p>Is it possible to setup without giving the dashboard account cluster-admin permissions?</p>

<p>based on the error you have posted what is happineening is:<br>
 1. helm is trying is install dashboard but by default it was picking up the namespace you have provided. </p>

<p>For solving that:<br>
 1. either you create roles based on the namespace you are trying to install, by default namespace should be: default<br>
 2. just install the helm chart in the proper location which is required by helm chart, in your case you can do:  </p>

<pre><code>helm install stable/kubernetes-dashboard --name=kubernetes-dashboard --namespace=kube-system
</code></pre>
