apiVersion: apps/v1
kind: Deployment
metadata:
  name: headlamp
  namespace: headlamp
spec:
  replicas: 1
  selector:
    matchLabels:
      app: headlamp
  template:
    metadata:
      labels:
        app: headlamp
    spec:
      serviceAccountName: headlamp-admin
      containers:
      - name: headlamp
        image: ghcr.io/headlamp-k8s/headlamp:v0.43.0
        imagePullPolicy: IfNotPresent
        args:
        - "-in-cluster"
        - "-plugins-dir=/headlamp/plugins"
        ports:
        - containerPort: 4466
          name: http
          protocol: TCP
        env:
        - name: HEADLAMP_CONFIG_BASE_URL
          value: ""
        - name: HEADLAMP_CONFIG_OIDC_IDP_ISSUER_URL
          value: https://auth.basicstack.de
        - name: HEADLAMP_CONFIG_OIDC_CLIENT_ID
          valueFrom:
            secretKeyRef:
              name: headlamp-oidc
              key: client-id
        - name: HEADLAMP_CONFIG_OIDC_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              name: headlamp-oidc
              key: client-secret
        - name: HEADLAMP_CONFIG_OIDC_SCOPES
          value: "openid,profile,email"
        volumeMounts:
        - name: headlamp-config
          mountPath: /headlamp/config
        resources:
          limits:
            cpu: 500m
            memory: 512Mi
          requests:
            cpu: 100m
            memory: 128Mi
      volumes:
      - name: headlamp-config
        emptyDir: {}