Add bootstrapping scripts and nix expressions

bootstrap/charts/kubernetes-dashboard.yaml

@@ -0,0 +1,45 @@
+# Default values for kubernetes-dashboard
+# This is a YAML-formatted file.
+# Declare name/value pairs to be passed into your templates.
+# name: value
+
+## Enable possibility to skip login
+enableSkipLogin: false
+
+## Serve application over HTTP without TLS
+enableInsecureLogin: false
+
+## Additional container arguments
+extraArgs:
+  - --token-ttl=0
+
+rbac:
+  clusterAdminRole: true
+
+service:
+  type: ClusterIP
+  externalPort: 443
+
+  annotations:
+    service.alpha.kubernetes.io/app-protocols: '{"https":"HTTPS"}'
+
+ingress:
+  enabled: true
+
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: ca-issuer
+    nginx.org/ssl-services: kubernetes-dashboard
+    nginx.ingress.kubernetes.io/secure-backends: "true"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+    # nginx.ingress.kubernetes.io/ssl-passthrough: "false"
+  paths:
+    - /
+  hosts:
+    - dashboard.@cluster@.local
+  tls:
+  - hosts:
+    - dashboard.@cluster@.local
+    secretName: kubernetes-dashboard-tls-cert
+