kubectl -n apps create serviceaccount headlamp-admin
kubectl create clusterrolebinding headlamp-admin \
  --serviceaccount=apps:headlamp-admin \
  --clusterrole=cluster-admin

  kubectl -n apps create token headlamp-admin