basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
stack.basicstack.de/apps/pangolin/pangolin-config.yaml

49 lines
1.4 KiB
YAML
Raw Normal View History

Add Pangolin configuration file Pangolin requires a config.toml file to start. Added ConfigMap with basic configuration including URL, database path, and OIDC settings. Updated deployment to mount the config file. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:17:14 +00:00
---
# Pangolin ConfigMap
fix(pangolin): Render postgres.connection_string into config.yml at startup Pangolin's PostgreSQL build requires postgres.connection_string in config.yml — DATABASE_URL alone is not honored as an override, so the container was crashing with "Postgres configuration is missing in the configuration file". Render the final config.yml at pod startup via a busybox init container that substitutes the DATABASE_URL secret into a __DATABASE_URL__ placeholder in the ConfigMap template, then mount the rendered file into the pangolin container. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-08 11:17:40 +00:00
# The `postgres.connection_string` placeholder is replaced at pod startup
# by the render-config init container using DATABASE_URL from the sealed
# secret. See pangolin-deployment.yaml.
Add Pangolin configuration file Pangolin requires a config.toml file to start. Added ConfigMap with basic configuration including URL, database path, and OIDC settings. Updated deployment to mount the config file. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:17:14 +00:00
apiVersion: v1
kind: ConfigMap
metadata:
name: pangolin-config
namespace: pangolin
data:
fix(pangolin): Render postgres.connection_string into config.yml at startup Pangolin's PostgreSQL build requires postgres.connection_string in config.yml — DATABASE_URL alone is not honored as an override, so the container was crashing with "Postgres configuration is missing in the configuration file". Render the final config.yml at pod startup via a busybox init container that substitutes the DATABASE_URL secret into a __DATABASE_URL__ placeholder in the ConfigMap template, then mount the rendered file into the pangolin container. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-08 11:17:40 +00:00
config.yml.tmpl: |
Fix Pangolin config: use YAML format with required fields Pangolin requires config/config.yml (YAML, not TOML) with specific required fields: - gerbil.start_port, gerbil.base_endpoint - app.dashboard_url, app.log_level - domains.domain1.base_domain - server.secret, server.cors.origins - flags (signup, verification) - database.path - oidc configuration Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:23:19 +00:00
gerbil:
start_port: 10000
base_endpoint: "pangolin.basicstack.de"
Add Pangolin configuration file Pangolin requires a config.toml file to start. Added ConfigMap with basic configuration including URL, database path, and OIDC settings. Updated deployment to mount the config file. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:17:14 +00:00
Fix Pangolin config: use YAML format with required fields Pangolin requires config/config.yml (YAML, not TOML) with specific required fields: - gerbil.start_port, gerbil.base_endpoint - app.dashboard_url, app.log_level - domains.domain1.base_domain - server.secret, server.cors.origins - flags (signup, verification) - database.path - oidc configuration Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:23:19 +00:00
app:
dashboard_url: "https://pangolin.basicstack.de"
log_level: "info"
Add Pangolin configuration file Pangolin requires a config.toml file to start. Added ConfigMap with basic configuration including URL, database path, and OIDC settings. Updated deployment to mount the config file. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:17:14 +00:00
Fix Pangolin config: use YAML format with required fields Pangolin requires config/config.yml (YAML, not TOML) with specific required fields: - gerbil.start_port, gerbil.base_endpoint - app.dashboard_url, app.log_level - domains.domain1.base_domain - server.secret, server.cors.origins - flags (signup, verification) - database.path - oidc configuration Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:23:19 +00:00
domains:
domain1:
base_domain: "basicstack.de"
server:
secret: "REPLACE_WITH_SECRET_FROM_SEALED_SECRET"
Pangolin: point badger apiBaseUrl at FQDN so Traefik in kube-system can reach it Traefik runs in kube-system, so the short DNS name "pangolin" that Pangolin's default `internal_hostname` uses does not resolve. Set both `server.internal_hostname` and `server.badger_override` to `pangolin.pangolin.svc.cluster.local` so the badger middleware and internal callbacks resolve from any namespace. Fixes the HTTP 500 on `https://paperclip.basicstack.de/` after cross-namespace IngressRoute wiring was fixed in DEV-457. Refs: DEV-457 Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-08 14:44:15 +00:00
# DEV-457: Traefik runs in kube-system; the short hostname "pangolin"
# (Pangolin's default) doesn't resolve there. Point badger + internal
# callbacks at the FQDN so the badger middleware can call back to the
# Pangolin API.
internal_hostname: "pangolin.pangolin.svc.cluster.local"
badger_override: "http://pangolin.pangolin.svc.cluster.local:3001/api/v1"
Fix Pangolin config: use YAML format with required fields Pangolin requires config/config.yml (YAML, not TOML) with specific required fields: - gerbil.start_port, gerbil.base_endpoint - app.dashboard_url, app.log_level - domains.domain1.base_domain - server.secret, server.cors.origins - flags (signup, verification) - database.path - oidc configuration Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:23:19 +00:00
cors:
origins:
- "https://pangolin.basicstack.de"
flags:
signup: true
verification: false
fix(pangolin): Render postgres.connection_string into config.yml at startup Pangolin's PostgreSQL build requires postgres.connection_string in config.yml — DATABASE_URL alone is not honored as an override, so the container was crashing with "Postgres configuration is missing in the configuration file". Render the final config.yml at pod startup via a busybox init container that substitutes the DATABASE_URL secret into a __DATABASE_URL__ placeholder in the ConfigMap template, then mount the rendered file into the pangolin container. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-08 11:17:40 +00:00
postgres:
connection_string: "__DATABASE_URL__"
Fix Pangolin config: use YAML format with required fields Pangolin requires config/config.yml (YAML, not TOML) with specific required fields: - gerbil.start_port, gerbil.base_endpoint - app.dashboard_url, app.log_level - domains.domain1.base_domain - server.secret, server.cors.origins - flags (signup, verification) - database.path - oidc configuration Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:23:19 +00:00
oidc:
enabled: true
issuer: "https://auth.basicstack.de"
callback_url: "https://pangolin.basicstack.de/auth/callback"
scopes: "openid profile email groups"
Reference in a new issue Copy permalink