# Default values for kubernetes-dashboard
# This is a YAML-formatted file.
# Declare name/value pairs to be passed into your templates.
# name: value

## Enable possibility to skip login
enableSkipLogin: false

## Serve application over HTTP without TLS
enableInsecureLogin: false

## Additional container arguments
extraArgs:
  - --token-ttl=0

rbac:
  clusterAdminRole: true

service:
  type: ClusterIP
  externalPort: 443

  annotations:
    service.alpha.kubernetes.io/app-protocols: '{"https":"HTTPS"}'

ingress:
  enabled: true

  annotations:
    kubernetes.io/ingress.class: nginx
    cert-manager.io/cluster-issuer: ca-issuer
    nginx.org/ssl-services: kubernetes-dashboard
    nginx.ingress.kubernetes.io/secure-backends: "true"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
    # nginx.ingress.kubernetes.io/ssl-passthrough: "false"
  paths:
    - /
  hosts:
    - dashboard.@cluster@.local
  tls:
  - hosts:
    - dashboard.@cluster@.local
    secretName: kubernetes-dashboard-tls-cert