# Headlamp - Kubernetes Dashboard

Headlamp is a modern, web-based Kubernetes dashboard that provides a user-friendly interface for managing and monitoring Kubernetes clusters.

## Deployment

This deployment includes:

- **Namespace**: `headlamp`
- **Service Account**: `headlamp-admin` with `cluster-admin` ClusterRoleBinding for full cluster access
- **OIDC Authentication**: Integrated with Pocket ID (https://auth.basicstack.de)
- **Ingress**: Accessible at https://headlamp.basicstack.de

## OIDC Configuration

The deployment is configured to authenticate users via Pocket ID using OpenID Connect (OIDC):

- **Issuer URL**: https://auth.basicstack.de
- **Client ID**: Stored in sealed secret `headlamp-oidc`
- **Client Secret**: Stored in sealed secret `headlamp-oidc`
- **Scopes**: openid, profile, email

### Authorized Users

The following users have access to Headlamp through Pocket ID:
- andreas.leinen@basicstack.de (admin)
- admin@basicstack.de (admin)

Users authenticate through the Pocket ID SSO and receive cluster-admin permissions via the service account.

## Resources

- **Official Documentation**: https://headlamp.dev/docs/
- **OIDC Setup Guide**: https://headlamp.dev/docs/latest/installation/in-cluster/oidc
- **Source Repository**: https://github.com/headlamp-k8s/headlamp

## Access

After deployment via ArgoCD, access the dashboard at:
https://headlamp.basicstack.de

Users will be redirected to Pocket ID for authentication before accessing the cluster dashboard.