From 22f4646f6aca1002c9692c964827964bb00bf967 Mon Sep 17 00:00:00 2001
From: Alex Lebens <alexanderlebens@gmail.com>
Date: Thu, 6 Nov 2025 14:17:32 -0600
Subject: [PATCH] create sa

---
 .../headlamp/templates/cluster-role-binding.yaml         | 3 +++
 .../management/headlamp/templates/service-account.yaml   | 9 +++++++++
 2 files changed, 12 insertions(+)
 create mode 100644 clusters/cl01tl/management/headlamp/templates/service-account.yaml

diff --git a/clusters/cl01tl/management/headlamp/templates/cluster-role-binding.yaml b/clusters/cl01tl/management/headlamp/templates/cluster-role-binding.yaml
index fe71ebd11..0ac308d3a 100644
--- a/clusters/cl01tl/management/headlamp/templates/cluster-role-binding.yaml
+++ b/clusters/cl01tl/management/headlamp/templates/cluster-role-binding.yaml
@@ -15,3 +15,6 @@ subjects:
   - kind: User
     name: alexanderlebens@gmail.com
     apiGroup: rbac.authorization.k8s.io
+  - kind: ServiceAccount
+    name: headlamp-admin
+    namespace: headlamp
diff --git a/clusters/cl01tl/management/headlamp/templates/service-account.yaml b/clusters/cl01tl/management/headlamp/templates/service-account.yaml
new file mode 100644
index 000000000..237bb54c2
--- /dev/null
+++ b/clusters/cl01tl/management/headlamp/templates/service-account.yaml
@@ -0,0 +1,9 @@
+apiVersion: talos.dev/v1alpha1
+kind: ServiceAccount
+metadata:
+  name: headlamp-admin
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: headlamp-admin
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}