Kubernetes Dashboard — Official Web UI for Kubernetes Clusters

Introduction

Kubernetes Dashboard is the official web-based UI maintained by the Kubernetes project. It provides a visual interface for deploying and managing containerized applications on a Kubernetes cluster without requiring command-line tools. The dashboard covers workloads, services, storage, configuration, and RBAC from a single browser window.

What Kubernetes Dashboard Does

• Displays an overview of all cluster resources including pods, deployments, services, and namespaces
• Allows creating and modifying Kubernetes resources directly from the browser with form-based or YAML editors
• Provides real-time container logs and exec-into-pod capability for debugging
• Visualizes resource utilization metrics when integrated with Metrics Server
• Supports multi-cluster management through a single dashboard instance

Architecture Overview

Kubernetes Dashboard v7+ is built on an Angular frontend that communicates with a Go backend API server. The backend authenticates requests using bearer tokens or kubeconfig and proxies them to the Kubernetes API server. Kong Ingress Gateway is used as the default reverse proxy. The dashboard runs as a Deployment inside the cluster and respects RBAC policies, so users only see and modify resources they are authorized to access.

Self-Hosting & Configuration

• Deploy via the official Helm chart into any Kubernetes 1.27+ cluster
• Authentication supports bearer tokens, kubeconfig files, and OpenID Connect providers
• Configure RBAC by creating ServiceAccount and ClusterRoleBinding resources for dashboard users
• TLS is enabled by default; bring your own certificate or use cert-manager for automated issuance
• Resource limits and replica counts are configurable through Helm values for production scaling

Key Features

• Official Kubernetes SIG project with long-term support and regular releases aligned with Kubernetes versions
• Namespace-scoped views let teams focus on their own workloads without cluster-wide noise
• Built-in YAML editor with validation for creating and editing any Kubernetes resource type
• Plugin system in v7+ allows extending the dashboard with custom views and actions
• Dark mode and responsive layout for modern browser experiences

Comparison with Similar Tools

• k9s — Terminal-based UI that is faster for power users but lacks visual dashboards and sharing capability
• Lens — Feature-rich desktop IDE for Kubernetes with extensions, but requires local installation and has license restrictions
• Headlamp — Extensible web UI with a plugin architecture, but smaller community and fewer built-in features
• Rancher — Full cluster management platform with multi-cluster support, but heavier to deploy and operate
• Portainer — Docker and Kubernetes management UI focused on simplicity, but less Kubernetes-native in its abstractions

FAQ

Q: Is Kubernetes Dashboard safe to expose publicly? A: Not recommended without proper authentication. Always use RBAC, enable token-based login, and place the dashboard behind a VPN or identity-aware proxy.

Q: Does it work with managed Kubernetes services like EKS, GKE, or AKS? A: Yes. The dashboard runs as a standard Kubernetes workload and works on any conformant cluster regardless of the provider.

Q: How do I create an admin token for login? A: Create a ServiceAccount with cluster-admin ClusterRoleBinding, then generate a token using kubectl create token <sa-name> -n kubernetes-dashboard.

Q: Can multiple users share the same dashboard instance? A: Yes. Each user authenticates with their own token or kubeconfig, and RBAC ensures they only see resources they have permission to access.

Sources

• https://github.com/kubernetes/dashboard
• https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/