<p>I am following the instructions as given <a href="https://kubernetes.io/docs/getting-started-guides/gce/" rel="nofollow noreferrer">here</a>.</p>

<p>I used the following command to get a running cluster, in gcloud console I typed: <code>curl -sS https://get.k8s.io | bash</code> as described in the link, after that, I ran the command <code>kubectl cluster-info</code> from that I got:</p>

<pre><code>kubernetes-dashboard is running at https://35.188.109.36/api/v1/proxy/namespaces/kube-
system/services/kubernetes-dashboard
</code></pre>

<p>but when I go to that url from firefox, the message that comes is: </p>

<pre><code>User "system:anonymous" cannot proxy services in the namespace 
"kube-system".: "No policy matched."
</code></pre>

<p>Expected behavior: Should ask for an admin name and password to connect to the dashboard.</p>

<p>Is there a reason why you did not use GKE (Google Kubernetes Engine) which provides the dashboard add-on installed out of the box?</p>

<p>In your case, simply:</p>

<ul>
<li>the kubernetes-dashboard addon might not be installed (but logs say so, so I think this is not the problem)</li>
<li>network configuration that makes <code>kubectl proxy</code> work might not be there</li>
<li>the <code>curl .. | sh</code> script you used probably did not configure the authentication properly.</li>
</ul>

<p>I recommend using GKE as this works out of the box. You can find documentation here: <a href="https://cloud.google.com/kubernetes-engine/docs/oss-ui" rel="nofollow noreferrer">https://cloud.google.com/kubernetes-engine/docs/oss-ui</a></p>

<hr>

<p>If you still want to use GCE, I recommend running <code>kubectl proxy</code> on your workstation (not your kubernetes nodes) and visiting <code>http://127.0.0.1:8001/ui</code> on your browser to see if it works.</p>

<p>If you get an error about not having enough permissions, you might be using a Kubernetes version new enough that enforces RBAC policies on pods like dashboard which access the API. You can grant those permissions by running:</p>

<pre><code>kubectl create clusterrolebinding add-on-cluster-admin  \
  --clusterrole=cluster-admin  \
  --serviceaccount=kube-system:default
</code></pre>

<hr>

<p>I also recommend trying out GKE UI in Google Cloud Console: <a href="https://console.cloud.google.com/kubernetes" rel="nofollow noreferrer">https://console.cloud.google.com/kubernetes</a></p>
