Documentation
¶
Overview ¶
Package dashboard serves the Stratum dashboard from the stratum binary: the embedded SPA, a reverse proxy to this cluster's own apiserver, and a session layer that authenticates users by ServiceAccount bearer-token passthrough.
Every user acts as themselves. A login hands the server a bearer token, which the apiserver itself validates (SelfSubjectReview); the token is then sealed into a session cookie and forwarded verbatim on every proxied request. The dashboard is never a shared privileged identity, holds no accounts of its own, and its own ServiceAccount needs no cluster permissions at all — so what a user can see and change is exactly their own RBAC.
It serves one cluster: the one it runs in.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Command ¶
Command returns `stratum dash`.
It is registered by cmd/stratum/main.go rather than inside pkg/cli.NewRootCommand, and that is not a style choice: pkg/cli is the one package a downstream build is permitted to import, so registering dash there would compile the dashboard server, the proxy and the embedded SPA into every embedding binary, which must not carry them.
Types ¶
This section is empty.
Source Files