kubernetes deployment strategy notes

headlamp/README.md

@@ -0,0 +1,3 @@
+no AI used in the deployment of headlamp, just a straightforward install from the instructions here https://headlamp.dev/docs/latest/installation/in-cluster/
+
+However, I did ask AI how to generate a non-expiring token since I didn't remember the exact command to do so.

headlamp/headlamp-ingressroute.yaml

@@ -0,0 +1,16 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: headlamp
+  namespace: headlamp
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`headlamp.k8s.lab.cudanet.org`)
+      kind: Rule
+      services:
+        - name: headlamp
+          port: 80
+  tls:
+    certResolver: letsencrypt

headlamp/service-account-token.yaml

@@ -0,0 +1,27 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: headlamp-admin
+  namespace: headlamp
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: headlamp-admin-binding
+subjects:
+  - kind: ServiceAccount
+    name: headlamp-admin
+    namespace: headlamp
+roleRef:
+  kind: ClusterRole
+  name: cluster-admin
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: headlamp-admin-token
+  namespace: headlamp
+  annotations:
+    kubernetes.io/service-account.name: headlamp-admin
+type: kubernetes.io/service-account-token

headlamp/token

@@ -0,0 +1 @@
+eyJhbGciOiJSUzI1NiIsImtpZCI6InJTeEp1ZTlwbzZnUkduNk5hN2Fhc0hMTHQtRTM1RlZlcGJZX2J4OS1GSFkifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJoZWFkbGFtcCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJoZWFkbGFtcC1hZG1pbi10b2tlbiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJoZWFkbGFtcC1hZG1pbiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6IjgyMmU4ODUxLTE3OTQtNDhkZi1hYjA4LTJiY2FhMDQ0YzgyYSIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDpoZWFkbGFtcDpoZWFkbGFtcC1hZG1pbiJ9.N7ybibaIl2_bljbsKcR-JiVCpdS15MgwurJqg9QTNchPoVYsncYFbTh4AbASLh97gbE5rYqsdXE7BnoOA70Zn_DZ9KcKI90NzFykDBUPZZaFv1rO5pIRGCdx5gGO5UXjFz3wCYhFTacEGNE9DVFrvBmeNlp8WI7xbHRM2SPG7BDFWwcxWeTXaVFoH6v3P9RRJWXec07JJEq51Un5jjmWV_gFh07pQAkUOwSYNX6ZQG6v2pRDEEAAu0cVmJI3kgvCeQBARXq7XKekGNIt0dQ6MR5B_4IronDDve3AbGLPB7cClKi4oTPD3GJT8cetAHhztIIQp0MnpW-2gNCGnTUmNg