OKD/OpenShift console for vanilla Kubernetes

I have using OpenShift almost 4 years and WEB console better than default Kubernetes Dashboard IMHO.

swagger nginx location close from external

location ~* ^/(api/swagger-ui) {
proxy_pass https://10.204.11.123:443;
include sites-available/includes/proxy.conf;
allow 10.186.35.0/24;
allow 10.204.11.0/24;
allow 10.204.1.0/24;
error_page 403 =404 /uri;
deny all;
}

nginx ingress server-snippet example

location ~* ^/api/swagger-ui(.) {

  allow XX.107.99.176;

  allow 10.186.33.0/24;

  allow 10.186.32.0/24;

  allow 10.186.35.0/24;

  allow 10.204.11.0/24;

  allow 10.204.1.0/24;

  deny all;

  return 403;  

}

prometheus systemd unit file

 [Unit]

Description=Prometheus

Wants=network-online.target

After=network-online.target

[Service]

#ExecStart=/etc/prometheus/prometheus

ExecStart=/etc/prometheus/prometheus \

--config.file=/etc/prometheus/prometheus.yml \

--storage.tsdb.path=/var/prometheus/data \

--storage.tsdb.retention.time=60d

WorkingDirectory=/etc/prometheus/

Restart=on-failure

User=root

Group=root

[Install]

WantedBy=multi-user.target

CRIO pull images from insecure registry.

 1. edit file /etc/containers/registries.conf

 2. add in the config file.

[[registry]]
insecure = true
location = "IP ADDRESS"

3. systemctl daemon-reload && systemctl restart crio