opencontrolplane-headlamp-helmchart/values.yaml at main · openmcp-project/opencontrolplane-headlamp-helmchart · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
# ── Headlamp chart values ─────────────────────────────────────────────────────
# All values are passed through to the headlamp subchart.
# Run `helm dependency update` once before the first install.
#
# Architecture overview
# ─────────────────────
# Headlamp is NOT exposed directly. All browser traffic goes through the BFF
# (ui-frontend) at /api/headlamp/*. The BFF:
#   1. Injects Authorization: Bearer <mcp_accessToken> from the encrypted session
#   2. Forwards the KUBECONFIG header (base64 kubeconfig) stored in the session
#
# Multi-tenancy (OSS Headlamp):
#   Each MCP gets a unique cluster alias (project--workspace--name). The frontend
#   calls Headlamp's parseKubeConfig endpoint to register the cluster in the
#   browser's IndexedDB, then navigates to /c/<alias>. Stale aliases from previous
#   MCPs are deleted via DELETE /cluster/<name> before registering the new one.
#   IndexedDB is per-browser so different users are naturally isolated.
#   Headlamp's own OIDC is disabled — the BFF handles all authentication.
#
# Required BFF environment variable:
#   HEADLAMP_UPSTREAM_URL=http://<headlamp-service>.<namespace>.svc.cluster.local
#
# The Headlamp Service should be ClusterIP (not exposed via Ingress).

headlamp:
  config:
    inCluster: true
    pluginsDir: "/headlamp/plugins"
    baseURL: "/api/headlamp"
    extraArgs:
      - "-enable-dynamic-clusters"
      - "-user-plugins-dir=/headlamp/user-plugins"
      - "-watch-plugins-changes=true"

  livenessProbe:
    httpGet:
      path: /api/headlamp/
  readinessProbe:
    httpGet:
      path: /api/headlamp/

  # No Ingress — Headlamp is only reachable via the BFF proxy inside the cluster.
  ingress:
    enabled: false

  pluginsManager:
    enabled: true
    baseImage: node:lts-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43
    configContent: |
      plugins:
        - name: headlamp-flux
          source: https://artifacthub.io/packages/headlamp/headlamp-plugins/headlamp_flux
          version: "0.6.0"
        - name: headlamp-ocp
          source: https://artifacthub.io/packages/headlamp/opencontrolplane-headlamp-plugin/opencontrolplane
          version: "0.0.8"
        - name: headlamp-crossplane
          source: https://artifacthub.io/packages/headlamp/crossplane-headlamp-plugin/headlamp_crossplane
          version: "0.0.4"
        - name: headlamp-external-secrets-operator
          source: https://artifacthub.io/packages/headlamp/external-secrets-operator-headlamp-plugin/external-secrets-operator
          version: "0.1.0-beta7"