first commit

apps/headlamp/ingress.yaml

@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: headlamp-ingress
+  namespace: headlamp
+  annotations:
+    kubernetes.io/ingress.class: traefik
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  rules:
+    - host: headlamp.duylai.duckdns.org
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: headlamp
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - headlamp.duylai.duckdns.org
+      secretName: headlamp-tls

apps/headlamp/kustomization.yaml

@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: headlamp
+
+resources:
+  - namespace.yaml
+  - ingress.yaml
+
+# Helm values are in values.yaml
+# Use: helm upgrade --install headlamp headlamp/headlamp -f values.yaml -n headlamp

apps/headlamp/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: headlamp
+  labels:
+    name: headlamp

apps/headlamp/values.yaml

@@ -0,0 +1,43 @@
+# Headlamp Helm Values
+# Reference: https://artifacthub.io/packages/helm/headlamp/headlamp
+
+replicaCount: 1
+
+image:
+  repository: ghcr.io/headlamp-k8s/headlamp
+  tag: ""
+  pullPolicy: IfNotPresent
+
+# Service configuration
+service:
+  type: ClusterIP
+  port: 80
+
+# Ingress managed via kustomize (see ingress.yaml)
+ingress:
+  enabled: false
+
+# Resources
+resources:
+  limits:
+    cpu: 200m
+    memory: 256Mi
+  requests:
+    cpu: 100m
+    memory: 128Mi
+
+# Persistent volume for plugins
+persistentVolumeClaim:
+  enabled: false
+
+# Service account for cluster access
+serviceAccount:
+  create: true
+  annotations: {}
+
+# RBAC - give Headlamp full cluster access
+rbac:
+  create: true
+  clusterRole:
+    create: true
+    name: cluster-admin