apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: headlamp labels: - pairs: app.kubernetes.io/instance: headlamp app.kubernetes.io/part-of: headlamp resources: - namespace.yaml - https://raw.githubusercontent.com/kubernetes-sigs/headlamp/refs/tags/v0.38.0/kubernetes-headlamp.yaml - ingress.yaml configMapGenerator: - name: headlamp-env envs: - headlamp.env options: labels: app.kubernetes.io/name: headlamp-env app.kubernetes.io/componet: headlamp patches: - patch: |- apiVersion: apps/v1 kind: Deployment metadata: name: headlamp namespace: kube-system spec: template: spec: containers: - name: headlamp envFrom: - configMapRef: name: headlamp-env optional: true securityContext: runAsNonRoot: true runAsUser: 100 runAsGroup: 101