519e7e95e7
Headlamp's BASE_URL config expects a path prefix (e.g., "/headlamp") or empty string, not a full URL. Since Headlamp is deployed at the domain root, BASE_URL should be empty. The OIDC redirect URIs in Pocket ID are correctly configured and the user has been added to the headlamp group, which should resolve the authentication issue. Related to DEV-324 Co-Authored-By: Paperclip <noreply@paperclip.ing>
57 lines
1.4 KiB
YAML
57 lines
1.4 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: headlamp
|
|
namespace: headlamp
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: headlamp
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: headlamp
|
|
spec:
|
|
serviceAccountName: headlamp-admin
|
|
containers:
|
|
- name: headlamp
|
|
image: ghcr.io/headlamp-k8s/headlamp:v0.43.0
|
|
imagePullPolicy: IfNotPresent
|
|
args:
|
|
- "-in-cluster"
|
|
- "-plugins-dir=/headlamp/plugins"
|
|
ports:
|
|
- containerPort: 4466
|
|
name: http
|
|
protocol: TCP
|
|
env:
|
|
- name: HEADLAMP_CONFIG_BASE_URL
|
|
value: ""
|
|
- name: HEADLAMP_CONFIG_OIDC_IDP_ISSUER_URL
|
|
value: https://auth.basicstack.de
|
|
- name: HEADLAMP_CONFIG_OIDC_CLIENT_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: headlamp-oidc
|
|
key: client-id
|
|
- name: HEADLAMP_CONFIG_OIDC_CLIENT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: headlamp-oidc
|
|
key: client-secret
|
|
- name: HEADLAMP_CONFIG_OIDC_SCOPES
|
|
value: "openid,profile,email"
|
|
volumeMounts:
|
|
- name: headlamp-config
|
|
mountPath: /headlamp/config
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
volumes:
|
|
- name: headlamp-config
|
|
emptyDir: {}
|