From e15188e4e02ed66a42c2af413e991db6dec765d7 Mon Sep 17 00:00:00 2001
From: Melvin GABALI <melvin.gabali@gmail.com>
Date: Tue, 13 Jan 2026 01:40:15 +0100
Subject: [PATCH] ad service account

---
 helm/headlamp/dev/templates/rbac-headlamp.yaml | 12 ++++++++++++
 helm/headlamp/dev/values.yaml                  | 11 ++++++++---
 2 files changed, 20 insertions(+), 3 deletions(-)
 create mode 100644 helm/headlamp/dev/templates/rbac-headlamp.yaml

diff --git a/helm/headlamp/dev/templates/rbac-headlamp.yaml b/helm/headlamp/dev/templates/rbac-headlamp.yaml
new file mode 100644
index 0000000..257bf5a
--- /dev/null
+++ b/helm/headlamp/dev/templates/rbac-headlamp.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: headlamp-admin-binding
+subjects:
+- kind: ServiceAccount
+  name: headlamp-admin
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: cluster-admin
+  apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/helm/headlamp/dev/values.yaml b/helm/headlamp/dev/values.yaml
index 40e25ce..b5c84ae 100644
--- a/helm/headlamp/dev/values.yaml
+++ b/helm/headlamp/dev/values.yaml
@@ -1,5 +1,5 @@
-# Toutes les configurations destinées au chart Nextcloud 
-# doivent être indentées sous la clé 'nextcloud'
+# Toutes les configurations destinées au chart Headlamp 
+# doivent être indentées sous la clé 'headlamp'
 headlamp:
   replicaCount: 1
 
@@ -15,10 +15,15 @@ headlamp:
     # Si votre projet Harbor 'images' est en PRIVÉ, 
     # vous devrez créer un secret Kubernetes et le renseigner ici :
     imagePullSecrets: []
+    
   ingress:
     enabled: true
     hosts: 
     - host: headlamp.dev.gkdomaine.local
       paths:
       - path: /
-        type: Prefix
\ No newline at end of file
+        type: Prefix
+  
+  serviceAccount:
+    create: true
+    name: "headlamp-admin"
\ No newline at end of file