Now that upstream has finally added support for PKCE with OIDC authentication, we can actually use Headlamp as a web application.
45 lines
956 B
YAML
45 lines
956 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: headlamp
|
|
|
|
labels:
|
|
- pairs:
|
|
app.kubernetes.io/instance: headlamp
|
|
app.kubernetes.io/part-of: headlamp
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- https://raw.githubusercontent.com/kubernetes-sigs/headlamp/refs/tags/v0.38.0/kubernetes-headlamp.yaml
|
|
- ingress.yaml
|
|
|
|
configMapGenerator:
|
|
- name: headlamp-env
|
|
envs:
|
|
- headlamp.env
|
|
options:
|
|
labels:
|
|
app.kubernetes.io/name: headlamp-env
|
|
app.kubernetes.io/componet: headlamp
|
|
|
|
patches:
|
|
- patch: |-
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: headlamp
|
|
namespace: kube-system
|
|
spec:
|
|
template:
|
|
spec:
|
|
containers:
|
|
- name: headlamp
|
|
envFrom:
|
|
- configMapRef:
|
|
name: headlamp-env
|
|
optional: true
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 100
|
|
runAsGroup: 101
|