<p>I got a cluster running on a Ubuntu server. I provide the web content on the server running in the cluster via port 80/443. The server itself I am accessing via <code>ssh</code> only, so no graphical interface at all.</p>

<p>Now I want to access the <a href="https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/#deploying-the-dashboard-ui" rel="nofollow noreferrer">kubernetes web ui</a> for that cluster. During research I found sources who say that accessing the <code>web ui</code> per remote access is not recommended for prod environments. The guides are only about using <code>kubectl proxy</code> to expose the dashboard to localhost.</p>

<p>Is there a solution or a more or less common way to access the dashboard of a cluster running on a server?</p>

elp
<pre><code>...
spec:
  clusterIP: 10.104.126.244
  externalIPs:
  - 192.168.64.1
  externalTrafficPolicy: Cluster
  ports:
  - nodePort: 31180
    port: 443
    protocol: TCP
    targetPort: 8443
  selector:
    k8s-app: kubernetes-dashboard
  sessionAffinity: None
  type: LoadBalancer
status:
</code></pre>

<p>The above kubernetes-dashboard-service will work, by going to <a href="https://192.168.64.1:31180" rel="nofollow noreferrer">https://192.168.64.1:31180</a> , 
where 192.168.64.1 is the IP address of your Kubernetes Controller, 
however there are caveats. </p>

<p>You'll need to use an old browser to access it and accept the security exception. </p>

<p>then run </p>

<p><code>kubectl -n kube-system get secret</code></p>

<p>And look for your <code>replicaset-controller-token-kzpmc</code></p>

<p>Then run </p>

<p><code>$ kubectl -n kube-system describe secrets replicaset-controller-token-kzpmc</code></p>

<p>And copy the long token at the bottom.</p>

<pre><code>Name:       replicaset-controller-token-kzpmc
Namespace:  kube-system
Labels:     &lt;none&gt;
Annotations:    kubernetes.io/service-account.name=replicaset-controller
        kubernetes.io/service-account.uid=d0d93741-96c5-11e7-8245-901b0e532516

Type:   kubernetes.io/service-account-token

Data
====
ca.crt:     1025 bytes
namespace:  11 bytes
token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3 
</code></pre>
