Deploy openshift console in native k8s

apiVersion: v1
kind: Namespace
metadata:
  name: openshift-console

---
apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    k8s-app: openshift-console
  name: openshift-console
  namespace: openshift-console

---
apiVersion: v1
kind: Secret
metadata:
  name: openshift-console-secret
  namespace: openshift-console
  annotations:
    kubernetes.io/service-account.name: openshift-console
type: kubernetes.io/service-account-token

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: openshift-console
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: openshift-console
  namespace: openshift-console

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: openshift-console
  namespace: openshift-console
data:
  BRIDGE_K8S_MODE: off-cluster
  BRIDGE_K8S_MODE_OFF_CLUSTER_SKIP_VERIFY_TLS: 'true'
  BRIDGE_K8S_MODE_OFF_CLUSTER_PROMETHEUS: http://prometheus-operated.monitoring:9090
  BRIDGE_K8S_MODE_OFF_CLUSTER_ALERTMANAGER: http://alertmanager-operated.monitoring:9093
  BRIDGE_K8S_MODE_OFF_CLUSTER_THANOS: http://prometheus-operated.monitoring:9090
  BRIDGE_K8S_AUTH: bearer-token
  BRIDGE_BASE_ADDRESS: https://console.domain.com
  BRIDGE_PUBLIC_DIR: /opt/bridge/static
  BRIDGE_CUSTOM_PRODUCT_NAME: ARU Dev
  BRIDGE_ALERTMANAGER_PUBLIC_URL: https://domain.com/alertmanager
  BRIDGE_PROMETHEUS_PUBLIC_URL: https://domain.com/prometheus
  BRIDGE_GRAFANA_PUBLIC_URL: https://domain.com/grafana

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: openshift-console
  namespace: openshift-console
  labels:
    k8s-app: openshift-console
spec:
  replicas: 1
  selector:
    matchLabels:
      k8s-app: openshift-console
  template:
    metadata:
      labels:
        k8s-app: openshift-console
    spec:
      serviceAccountName: openshift-console
      automountServiceAccountToken: true
      containers:
        - name: openshift-console
          image: quay.io/openshift/origin-console:4.5.0
          resources:
            requests:
              cpu: 200m
              memory: 512Mi
            limits:
              cpu: 500m
              memory: 512Mi
          envFrom:
            - configMapRef:
                name: openshift-console
          env:
            - name: BRIDGE_K8S_AUTH_BEARER_TOKEN
              valueFrom:
                secretKeyRef:
                  name: openshift-console-secret
                  key: token
            - name:   BRIDGE_K8S_MODE_OFF_CLUSTER_ENDPOINT
              value: https://$(KUBERNETES_SERVICE_HOST):$(KUBERNETES_SERVICE_PORT)
          command:
            - /opt/bridge/bin/bridge

---
kind: Service
apiVersion: v1
metadata:
  labels:
    k8s-app: openshift-console
  name: openshift-console
  namespace: openshift-console
spec:
  ports:
    - port: 9000
      targetPort: 9000
  selector:
    k8s-app: openshift-console

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: openshift-console
  namespace: openshift-console
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`console.domain.com`)
      kind: Rule
      priority: 12
      services:
        - name: openshift-console
          kind: Service
          namespace: openshift-console
          port: 9000
          weight: 1
      middlewares:
        - name: openshift-console-white-list
        - name: dashboard-auth@file
  tls:
    certResolver: cf

---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: openshift-console-white-list
  namespace: openshift-console
spec:
  ipWhiteList:
    sourceRange:
      - 11.11.11.11/32
      - 22.22.22.22/32