Headlamp

Headlamp is a modern, extensible Kubernetes web UI that runs in-cluster or as a desktop application. It provides a dashboard for viewing and managing cluster resources with built-in OIDC support.

Quickstart

make deploy-headlamp

Headlamp is deployed via its official Helm chart and configured to authenticate through Dex OIDC. The ingress is exposed at headlamp.<NIPIO_IP>.nip.io.

Access

Item	Value
URL	`http://headlamp.__NIPIO_IP__.nip.io`
SSO Login	Sign in with Dex — `[email protected]` / `password`
Service Account	Headlamp uses a `cluster-admin` bound SA by default

OIDC Configuration

Headlamp forwards authentication to Dex using the OIDC authorization code flow with PKCE. The redirect URI registered in Dex is:

http://headlamp.<NIPIO_IP>.nip.io/oidc-callback

Configuration values are in headlamp/values.yaml:

config:
  oidc:
    clientID: "headlamp"
    clientSecret: "headlamp-oidc-secret"
    issuerURL: "http://dex.<NIPIO_IP>.nip.io/dex"
    scopes: "openid email profile groups"
    usePKCE: true

Note

The __NIPIO_IP__ placeholder is auto-substituted during make deploy-headlamp — refer to IP Detection.

Cleanup

make undeploy-headlamp

Files

File	Purpose
`headlamp/values.yaml`	Helm values with OIDC settings
`headlamp/ingress.yaml`	Standalone Traefik ingress (optional — Helm chart also creates one)