innohub/k3s
7
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

headlamp auth

Browse Source
This commit is contained in:
titver968
2025-10-28 07:43:05 +01:00
parent 9c2ca4dd27
commit 7912509c40
1 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
argocd/apps/headlamp/values-headlamp.yaml
View File

@@ -15,17 +15,26 @@ spec:
config: config:
inCluster: true inCluster: true
# Verwende den headlamp-admin ServiceAccount
serviceAccount: serviceAccount:
create: false create: false
name: headlamp-admin name: headlamp-admin
# Keine separate ClusterRoleBinding erstellen
clusterRoleBinding: clusterRoleBinding:
create: false create: false
# Wichtig: automountServiceAccountToken muss true sein # Deaktiviere das automatische Token-Mounting
automountServiceAccountToken: true automountServiceAccountToken: false
# Mounte stattdessen unser langlebiges Token
volumes:
- name: sa-token
secret:
secretName: headlamp-admin-token
volumeMounts:
- name: sa-token
mountPath: /var/run/secrets/kubernetes.io/serviceaccount
readOnly: true
ingress: ingress:
enabled: true enabled: true