Allow to relocate dashboard and heapster out of kube-system

[farcaller]

Dashboard version: 1.8
Kubernetes version: 1.8.5

Currently the dashboard has a few places where kube-system namespace is hardcoded, which makes simple namespacing of the dashboard very troublesome.

This creates issues with pods isolation. kube-system has all the pods that are required for cluster health, while the dashboard itself isn't on the critical path. It makes it very hard to isolate some components, e.g. if one were to use a NetworkPolicy to only allow heapster to talk to influxdb they might cause a cluster-level disruption as presence of a NetworkPolicy in kube-system will block dns traffic too.

It should be easier to extract the dashboard and relevant components (heapster and influxdb) to a dedicated namespace to manage the access to them granularly. I include heapster in here as its only consumer in my setup is the dashboard, prometheus does the "real" monitoring instead.

[maciaszczykm]

It is partly finished. Last adjustments will be done in #3495.

/close

[k8s-ci-robot]

@maciaszczykm: Closing this issue.

In response to this:

It is partly finished. Last adjustments will be done in #3495.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.