Upgrade to Pro — share decks privately, control downloads, hide ads and more …

20250705 Headlamp: 專注可擴展性的 Kubernetes 用戶界面

20250705 Headlamp: 專注可擴展性的 Kubernetes 用戶界面

Avatar for Phil Huang

Phil Huang

July 04, 2025
Tweet

More Decks by Phil Huang

Other Decks in Technology

Transcript

  1. Headlamp: 專注可擴展性的 Kubernetes 用戶界面 Kubernetes Community Day Taipei 2025 Phil

    Huang <[email protected]> CNCF Ambassador / Senior Cloud Solution Architect, Microsoft 2025/07/05
  2. Do you still remember k8s docs recommended to set up

    at beginning of the CKA / CKS / CKAD exams? https://kubernetes.io/docs/tasks/tools/install-kubectl-linux/#:~:text=You%20must%20use%20a%20kubectl%20version%20that%20is%20within
  3. Phil Huang 黃秉鈞 • CNCF Ambassador 雲原生基金會大使 • Cloud Native

    Taiwan User Group Member • Microsoft Senior Cloud Solution Architect
  4. Headlamp: Your Kubernetes Experience https://www.cncf.io/projects/headlamp/ During the keynote speech at

    KubeCon+CloudNativeCon Europe 2025, Microsoft announced the contribution of the Headlamp project to the CNCF as Sandbox project
  5. Continuing the Kinvolk mission as part of Microsoft Open Source

    Strategy • Headlamp, Flatcar Container Linux and Inspector Gadget were both developed by Kinvolk, a German startup company • In 2021, Microsoft acquired Kinvolk and contributed the project to the open-source community, but in reality, the original Kinvolk team remained the main contributors and driving force behind it. • Acquiring Kinvolk to enhance upstream open source contributions in the fields of Kubernetes and containers https://opensource.microsoft.com/projects/ https://kinvolk.io/
  6. Core Value Proposition of Headlamp 1. Open Source and Vendor

    Neutral: As a CNCF sandbox project, it is community-driven with no vendor lock-in 2. Built of scalability: A powerful plugin system is at its core, allowing users to deeply customize. 3. Modern and user-friendly: Offers both desktop applications and in-cluster deployment modes, with a clean and intuitive Ui design. 4. Secure and reliable: The UI dynamically adjusts based on the user’s RBAC permissions to ensure security. 8
  7. 11

  8. Support Traditional Chinese • In order to reduce management effort

    of public sector and healthcare industry • Welcome everyone to keep updating 12 https://headlamp.dev/docs/latest/development/i18n/contributing
  9. 17 Deployment Mode 1. Desktop Application 2. In-cluster Deployment Location

    Local Computer Inside Kubernetes cluster Access Method Standalone desktop application Web application via browser Support Platforms Windows / Linux / MacOS Any Kubernetes-supported environment Use Cases Development / Personal Team-shared central Kubernetes Platform Network Requirements Local network connection to Kubernetes API Access through cluster internal network or expose service Update Mechanism Through OS package managers Through Helm or kubectl updates 2 Deployment Mode
  10. About In-cluster Deployment Scenario Authentication Method Key Components Pros Challenges

    Dev k8s Service Account Token ServiceAccount / ClusterRoleBinding Simple, and easy Low security Prod k8s OIDC OIDC IdP (Keycloak) / ClusterRoleBinding Standardization Necessary to set up and maintain the OIDC IdP Azure Kubernetes Service OIDC Microsoft Entra ID / OAuth2-Proxy / ClusterRoleBinding Deep integration with the Azure ecosystem Need to have Entra ID EKS OIDC AWS Cognito / ClusterRoleBinding Deep integration with the AWS ecosystem Need to have Cognito https://headlamp.dev/docs/latest/installation/in-cluster/
  11. 20 Features Plugin Catalog App Catalog Target Users Users who

    want to extend Headlamp UI functionality Users who want to deploy applications to Kubernetes Installation Content Headlamp plugin (UI Extensions) Helm Charts Support Both desktop and web Support desktop 2 Catalog
  12. App Catalog: Deploy Application into Kubernetes • Support Artifact Hub:

    Native integration with Artifact Hub allows service installation via Helm Chart
  13. LFX Mentorship Program https://mentorship.lfx.linuxfoundation.org/#projects_al https://docs.linuxfoundation.org/lfx/mentorship/mentee-stipends/total-stipend-amountl 1. 12-Week Intensive Learning Program

    2. Approximately 15 hours of expected weekly commitment 3. 100% conducted remotely 4. Total stipend amount (Taiwan): 3,000 USD 5. Gain practical open source project contribution experience