e640db0880
- Deploy Headlamp v0.27.0 in dedicated namespace - Configure OIDC authentication with Pocket ID - Grant cluster-admin access via service account - Expose via Traefik ingress at headlamp.basicstack.de - Seal OIDC client credentials - Enable access for andreas.leinen@basicstack.de and admin@basicstack.de Co-Authored-By: Paperclip <noreply@paperclip.ing> |
||
|---|---|---|
| .. | ||
| deployment.yaml | ||
| headlamp-oidc-sealed.yaml | ||
| ingress.yaml | ||
| README.md | ||
| service-account.yaml | ||
| service.yaml | ||
Headlamp - Kubernetes Dashboard
Headlamp is a modern, web-based Kubernetes dashboard that provides a user-friendly interface for managing and monitoring Kubernetes clusters.
Deployment
This deployment includes:
- Namespace:
headlamp - Service Account:
headlamp-adminwithcluster-adminClusterRoleBinding for full cluster access - OIDC Authentication: Integrated with Pocket ID (https://auth.basicstack.de)
- Ingress: Accessible at https://headlamp.basicstack.de
OIDC Configuration
The deployment is configured to authenticate users via Pocket ID using OpenID Connect (OIDC):
- Issuer URL: https://auth.basicstack.de
- Client ID: Stored in sealed secret
headlamp-oidc - Client Secret: Stored in sealed secret
headlamp-oidc - Scopes: openid, profile, email
Authorized Users
The following users have access to Headlamp through Pocket ID:
- andreas.leinen@basicstack.de (admin)
- admin@basicstack.de (admin)
Users authenticate through the Pocket ID SSO and receive cluster-admin permissions via the service account.
Resources
- Official Documentation: https://headlamp.dev/docs/
- OIDC Setup Guide: https://headlamp.dev/docs/latest/installation/in-cluster/oidc
- Source Repository: https://github.com/headlamp-k8s/headlamp
Access
After deployment via ArgoCD, access the dashboard at: https://headlamp.basicstack.de
Users will be redirected to Pocket ID for authentication before accessing the cluster dashboard.