apiVersion: v1
kind: ServiceAccount
metadata:
  name: headlamp
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: headlamp
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
  - kind: ServiceAccount
    name: headlamp
    namespace: {{ .Release.Namespace }}
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: headlamp
  labels:
    app: headlamp
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: headlamp
  template:
    metadata:
      labels:
        app: headlamp
    spec:
      serviceAccountName: headlamp
      nodeSelector:
        homelab/node-role: worker
      containers:
        - name: headlamp
          image: {{ .Values.image }}
          args:
            - -in-cluster
            - -plugins-dir=/headlamp/plugins
            - -enable-helm
          ports:
            - containerPort: 4466
---
apiVersion: v1
kind: Service
metadata:
  name: headlamp
spec:
  selector:
    app: headlamp
  ports:
    - port: 4466
      targetPort: 4466