Kubernetes Dashboard 1.10: Multi-Cluster UX and CRD Support

Introduction

Kubernetes Dashboard 1.10, released on October 16, 2018, streamlines cluster operations with polished authentication, namespace scoping, and Custom Resource Definition (CRD) support. It’s a welcome upgrade for teams that need a secure, visual cockpit for Kubernetes.

Release Highlights

Refined Authentication Flow

Token, kubeconfig, and OpenID Connect logins now share a single flow with clear error feedback.
Session timeouts configurable per cluster.
Service Account token creation wizard helps operators grant least privilege access.

CRD Visibility

Dashboard lists CRDs and renders basic views for custom objects.
Quick links to YAML editors accelerate troubleshooting of Operators and GitOps-managed CRDs.
Supports resource filtering by label selectors.

Multi-Cluster Switching

Users can upload kubeconfig files containing multiple contexts and switch instantly.
Context selector stores recent clusters for faster on-call response.
Namespaces persist per context to avoid accidental cross-environment edits.

Implementation Tips

Lock Down Access: deploy Dashboard behind an OAuth2 proxy or identity-aware proxy; disable the default Heapster integration.
Grant Minimal RBAC: create per-user RoleBindings rather than cluster-admin tokens.
Expose Securely: run behind Traefik 1.7 or Envoy 1.7 with mTLS from the corporate VPN.
Monitor Usage: scrape /metrics to track logins and UI errors with Prometheus 2.3 dashboards.

Security reality check

The Dashboard is a powerful tool — which means it becomes a high-value target. In practice:

Avoid “shared admin” ServiceAccount tokens; tie access to identity (OIDC) and least-privilege RBAC.
Treat it like any other production control plane surface: private network, strong auth, and clear auditability.

Sample RBAC for Read-Only Access

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: dashboard-readonly
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: view
subjects:
- kind: ServiceAccount
  name: dashboard-user
  namespace: kube-system

Ecosystem Impact

Supports CRDs from FluxCD 1.6, Knative 0.1, and Cilium 1.0 out of the box.
Better integrates with CoreDNS 1.2 and Calico 3.0 metrics by linking to Grafana dashboards.
Enhances on-call workflows with clipboard-friendly pod logs and event streams.

Summary

Aspect	Details
Release Date	October 16, 2018
Key Gains	Unified login, CRD views, multi-context switching
Why it Matters	Gives operators a safer, faster UI for managing modern Kubernetes clusters

Dashboard 1.10 is a reminder that strong UX belongs in Kubernetes tooling too. With CRD insight and multi-cluster ergonomics, it’s a worthy upgrade for platform teams juggling complex fleets.

Table of Contents