59 lines
1.4 KiB
YAML
59 lines
1.4 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: headlamp
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: "https://kubernetes-sigs.github.io/headlamp/"
|
|
chart: "headlamp"
|
|
targetRevision: 0.*.*
|
|
helm:
|
|
values: |
|
|
config:
|
|
inCluster: true
|
|
|
|
serviceAccount:
|
|
create: false
|
|
name: headlamp-admin
|
|
|
|
clusterRoleBinding:
|
|
create: false
|
|
|
|
# Deaktiviere das automatische Token-Mounting
|
|
automountServiceAccountToken: false
|
|
|
|
# Mounte stattdessen unser langlebiges Token
|
|
volumes:
|
|
- name: sa-token
|
|
secret:
|
|
secretName: headlamp-admin-token
|
|
|
|
volumeMounts:
|
|
- name: sa-token
|
|
mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
|
readOnly: true
|
|
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: "traefik"
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web
|
|
hosts:
|
|
- host: headlamp.innohub.local
|
|
paths:
|
|
- path: /
|
|
type: ImplementationSpecific
|
|
|
|
destination:
|
|
server: 'https://kubernetes.default.svc'
|
|
namespace: kube-system
|
|
|
|
syncPolicy:
|
|
automated:
|
|
selfHeal: true
|
|
prune: true
|
|
syncOptions:
|
|
- CreateNamespace=true |