Enable the usage of headlamp in OpenShift¶

If you want to use Headlamp as GUI App in OpenShift, you have to enable Namespace List in your Cluster or work as cluster-admin the whole time (no good idea :-().

So assuming your Headlamp users are "Power Users":

---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: list-namespaces
rules:
  - verbs:
      - list
    apiGroups:
      - ''
    resources:
      - namespaces
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: power-users-use-headlamp
subjects:
  - kind: Group
    apiGroup: rbac.authorization.k8s.io
    name: power-users
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: list-namespaces
---

And yes you know you have to create a power-users group and put your users in:

kind: Group
apiVersion: user.openshift.io/v1
metadata:
  name: power-users
users:
  - peter
  - nils

Now you can see all namespaces in Headlamp. So it's better working as power user ;-)