Kube-faq

# Enable the usage of headlamp in OpenShift

If you want to use [Headlamp](https://headlamp.dev) as GUI App in OpenShift, you have to enable Namespace List in your Cluster or work as cluster-admin the whole time (no good idea :-().

So assuming your Headlamp users are "Power Users":

```yaml

---

kind: ClusterRole

apiVersion: rbac.authorization.k8s.io/v1

metadata:

  name: list-namespaces

rules:

  - verbs:

      - list

    apiGroups:

      - ''

    resources:

      - namespaces

---

kind: ClusterRoleBinding

apiVersion: rbac.authorization.k8s.io/v1

metadata:

  name: power-users-use-headlamp

subjects:

  - kind: Group

    apiGroup: rbac.authorization.k8s.io

    name: power-users

roleRef:

  apiGroup: rbac.authorization.k8s.io

  kind: ClusterRole

  name: list-namespaces

---

```

And yes you know you have to create a power-users group and put your users in:

```yaml

kind: Group

apiVersion: user.openshift.io/v1

metadata:

  name: power-users

users:

  - peter

  - nils

```

Now you can see all namespaces in Headlamp. So it's better working as power user ;-)