Skip to content

Commit

Permalink
Mention read-only installs and version 0.5 installs
Browse files Browse the repository at this point in the history
  • Loading branch information
a-roberts authored and tekton-robot committed Feb 10, 2020
1 parent f805be8 commit fa1236e
Showing 1 changed file with 16 additions and 18 deletions.
34 changes: 16 additions & 18 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,15 @@ Tekton Dashboard is a general purpose, web-based UI for Tekton Pipelines. It all

## Pre-requisites

[Tekton Pipelines](https://github.com/tektoncd/pipeline) must be installed in order to use the Tekton Dashboard. Instructions to install Tekton Pipelines can be found [here](https://github.com/tektoncd/pipeline/blob/master/docs/install.md). Use the v0.4.1 release for Tekton Pipelines v0.8.0. For v0.7.0 of Tekton Pipelines, use the Tekton Dashboard v0.2.1 release. To continue using Tekton Pipelines v0.5.2, use the Tekton Dashboard v0.1.1 release published [here](https://github.com/tektoncd/dashboard/releases/tag/v0.1.1).
[Tekton Pipelines](https://github.com/tektoncd/pipeline) must be installed in order to use the Tekton Dashboard. Instructions to install Tekton Pipelines can be found [here](https://github.com/tektoncd/pipeline/blob/master/docs/install.md).

### Which version should I use?

- Use the v0.5.1 release for Tekton Pipelines v0.10.1 (can display components from Tekton Triggers 0.2.1 and has a read-only install mode)
- Use the v0.5.0 release for Tekton Pipelines v0.10.1 (can display components from Tekton Triggers 0.1 and has a read-only install mode)
- Use the v0.4.1 release for Tekton Pipelines v0.8.0 (can display components from Tekton Triggers 0.1)
- Use the v0.2.1 release for Tekton Pipelines v0.7.0
- Use the v0.1.1 release for Tekton Pipelines v0.5.2

## Install Dashboard

Expand All @@ -20,11 +28,14 @@ Tekton Dashboard is a general purpose, web-based UI for Tekton Pipelines. It all
and its dependencies:

```bash
kubectl apply --filename https://github.com/tektoncd/dashboard/releases/download/v0.4.1/dashboard_latest_release.yaml
kubectl apply --filename https://github.com/tektoncd/dashboard/releases/download/v0.5.1/tekton-dashboard-release.yaml
```

Previous versions will be available at `previous/$VERSION_NUMBER`, e.g.
https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.1.1/release.yaml
Previous versions (up to 0.5.0) are available at `previous/$VERSION_NUMBER/release.yaml`, e.g.
https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.4.1/release.yaml

As of version 0.5.0, the file name pattern is more descriptive, e.g.
https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.5.0/tekton-dashboard-release.yaml

2. Run the
[`kubectl get`](https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#get)
Expand Down Expand Up @@ -102,23 +113,10 @@ You can then access the Tekton Dashboard at `tekton-dashboard.${ip}.nip.io`. Thi
1. Assuming you want to install the Dashboard into the `tekton-pipelines` namespace:

```bash
kubectl apply --filename https://github.com/tektoncd/dashboard/releases/download/v0.4.1/dashboard_latest_openshift-tekton-dashboard-release.yaml --validate=false
kubectl apply --filename https://github.com/tektoncd/dashboard/releases/download/v0.5.1/openshift-tekton-dashboard-release.yaml --validate=false
```

2. Access the dashboard by determining its route with `kubectl get route tekton-dashboard -n tekton-pipelines`
This has been tested with the following OpenShift security settings (from `oc get scc`):

```
NAME PRIV CAPS SELINUX RUNASUSER FSGROUP SUPGROUP PRIORITY READONLYROOTFS VOLUMES
anyuid false [] MustRunAs RunAsAny RunAsAny RunAsAny 10 false [configMap downwardAPI emptyDir persistentVolumeClaim projected secret]
hostaccess false [] MustRunAs MustRunAsRange MustRunAs RunAsAny <none> false [configMap downwardAPI emptyDir hostPath persistentVolumeClaim projected secret]
hostmount-anyuid false [] MustRunAs RunAsAny RunAsAny RunAsAny <none> false [configMap downwardAPI emptyDir hostPath nfs persistentVolumeClaim projected secret]
hostnetwork false [] MustRunAs MustRunAsRange MustRunAs MustRunAs <none> false [configMap downwardAPI emptyDir persistentVolumeClaim projected secret]
node-exporter false [] RunAsAny RunAsAny RunAsAny RunAsAny <none> false [*]
nonroot false [] MustRunAs MustRunAsNonRoot RunAsAny RunAsAny <none> false [configMap downwardAPI emptyDir persistentVolumeClaim projected secret]
privileged true [*] RunAsAny RunAsAny RunAsAny RunAsAny <none> false [*]
restricted false [] MustRunAs MustRunAsRange MustRunAs RunAsAny <none> false [configMap downwardAPI emptyDir persistentVolumeClaim projected secret]
```

### Enable TLS for dashboard access via Ingress
**Will only work in the cluster node**
Expand Down

0 comments on commit fa1236e

Please sign in to comment.