headlamp:
  config:
    oidc:
      secret:
        create: false
      externalSecret:
        enabled: true
        name: headlamp-oidc-secret
  persistentVolumeClaim:
    enabled: true
    accessModes:
      - ReadWriteOnce
    size: 10Gi
    storageClassName: ceph-block
    volumeMode: Filesystem
  ingress:
    enabled: true
    annotations:
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
      traefik.ingress.kubernetes.io/router.tls: "true"
      cert-manager.io/cluster-issuer: letsencrypt-issuer
    hosts:
      - host: headlamp.alexlebens.net
        paths:
          - path: /
            type: ImplementationSpecific
    tls:
      - secretName: headlamp-secret-tls
        hosts:
          - headlamp.alexlebens.net
  resources:
    requests:
      cpu: 100m
      memory: 128Mi