Skip to content

Add service proxy support and enable Helm integration in headlamp #3532

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 7 commits into
base: main
Choose a base branch
from

Conversation

shahvrushali22
Copy link

Summary

This PR adds in-cluster service proxy support to Headlamp, enables Helm operations with authenticated access, and refactors token validation for consistency. It also ensures namespace scoping in Helm charts and enables secure HTTPS-based readiness and liveness probes.

Changes

  • Added serviceproxy backend module to enable authenticated in-cluster service access.
  • Registered new route /clusters/{cluster}/serviceproxy/{namespace}/{name}.
  • Refactored checkHeadlampBackendToken into a method for consistency.
  • Enabled Helm support via --enable-helm flag and validated tokens using SelfSubjectReview.
  • Forwarded Bearer tokens for secure Helm operations.
  • Updated Helm chart templates:
  • Added namespace scoping to all resources.
  • Enabled HTTPS for liveness/readiness probes and services.
  • Made Helm feature toggleable via values.yaml.
  • Added config test for enableHelm flag and updated expected chart templates.

Steps to Test

  1. Install Headlamp with Helm support enabled
  2. Test in-cluster service proxy route
  3. Test Helm integration in the UI

@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Jun 26, 2025
@k8s-ci-robot k8s-ci-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jun 26, 2025
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: shahvrushali22
Once this PR has been reviewed and has the lgtm label, please assign joaquimrocha for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Jun 26, 2025
@k8s-ci-robot k8s-ci-robot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jun 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants