How to deploy the dashboard for a namespace only

[maitrungduc1410]

is it possible to deploy the dashboard for a namespace only? where it only has access and can monitor resource of a specific namespace?

[Nikhil-321]

Hey @maitrungduc1410 Were you able to find any solution for this? I am also looking for the exact same thing.

[floreks]

Dashboard doesn't really have any permissions. It relies fully on the user permissions. You can create a user with role scoped to a single namespace. This way user won't be able to access any othet namespaces. One thing to remember is to configure namespace fallback list on settings view since user probably won't have access to list namespaces in the cluster.

[maitrungduc1410]

@floreks but the helm chart has custom-resource-definitions.yaml uses customresourcedefinitions which is only available in cluster scope

This is what I'm trying:

helm install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --kubeconfig=./kubernetes-config

kubernetes-config is config file tied to a single namespace

and this is error after I run install:

Error: INSTALLATION FAILED: failed to install CRD crds/custom-resource-definitions.yaml: 11 errors occurred:
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
        * customresourcedefinitions.apiextensions.k8s.io is forbidden: User "lk8s-42337e" cannot create resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope