# ------------------------------------------------------------------------------
# Skyway — Helm Values
# Chart: https://kubernetes-sigs.github.io/headlamp/
# Version: 0.42.0
#
# Auth: Token-based (service account) for now.
# TODO: Wire OIDC to guest-relations (Authentik) — requires Talos API server
#       patch to add oidc-issuer-url. See parking lot.
# ------------------------------------------------------------------------------

config:
  inCluster: true

# -- ClusterRoleBinding to cluster-admin for full visibility
clusterRoleBinding:
  create: true
  clusterRoleName: cluster-admin

serviceAccount:
  create: true
  name: headlamp

resources:
  requests:
    cpu: 100m
    memory: 128Mi
  limits:
    cpu: 500m
    memory: 256Mi

# Ingress handled via HTTPRoute (Cilium Gateway) — disable built-in ingress
ingress:
  enabled: false