Deployed Kubernetes Dashboard with LAN access and read-only login. Installed Metrics Server and patched it for kubelet TLS SAN limitations on this single-node cluster.
/usr/local/bin/helm for package management.kubernetes-dashboard namespace and components.kubernetes-dashboard-nodeport on port 32443.dashboard-readonly ServiceAccount and read-only RBAC bindings.--kubelet-insecure-tls.kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yamlkubectl apply -f - (NodePort service)kubectl apply -f - (ServiceAccount + RBAC)kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yamlkubectl -n kube-system patch deployment metrics-server --type='json' ...https://<node-ip>:32443kubectl -n kubernetes-dashboard create token dashboard-readonlyrunbooks/kubernetes-dashboard-access.md