basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
stack.basicstack.de/apps/pangolin/pangolin-controller-config.yaml

13 lines
404 B
YAML
Raw Normal View History

feat(pangolin): Add Kubernetes controller manifests Create complete manifest set for Pangolin controller deployment: - RBAC with ServiceAccount, ClusterRole, and ClusterRoleBinding - ConfigMap with controller configuration (endpoint, namespace, leader election) - Deployment with resource limits, health probes, and security context - Service for metrics endpoint on port 8080 Controller will manage Traefik CRDs (IngressRoute, Middleware, TraefikService) and sync configuration from Pangolin API. Relates to DEV-397 Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-01 15:40:30 +00:00
apiVersion: v1
kind: ConfigMap
metadata:
name: pangolin-controller-config
namespace: pangolin
data:
Fix pangolin-kube-controller authentication and endpoint Update controller configuration to fix 401 authentication errors: - Add CONFIG_AUTH_HEADER with Bearer token for Pangolin API access - Correct CONFIG_ENDPOINT port from 3000 to 3002 (matches Pangolin service) - Remove duplicate controller manifests from controller/ subdirectory The existing controller deployment was failing with 401 errors because it lacked authentication credentials. This change adds the API key provided in DEV-437 and corrects the internal service endpoint. Related: DEV-437 Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-02 10:09:46 +00:00
CONFIG_ENDPOINT: "http://pangolin.pangolin.svc.cluster.local:3002/api/v1/traefik-config"
CONFIG_AUTH_HEADER: "Bearer 5qid06u9j325kpk.ywd3bpsx34dtxyczgatyxuoxkzwhie7d72k6v4hw"
fix(pangolin): Update controller configuration for deployment - Use specific image version 0.1.0-alpha.1 instead of :latest - Fix API endpoint port from 3001 to 3000 (correct Pangolin service port) - Add CONFIG_ALLOW_INSECURE_HTTP for internal cluster HTTP communication - Fix security context with numeric UIDs (65532) to avoid runAsNonRoot error - Add required RBAC permissions for CRD and IngressClass discovery Controller now successfully starts and acquires leader lease. Next step: Configure API authentication (CONFIG_AUTH_HEADER) for controller to access Pangolin API endpoint. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-01 15:51:11 +00:00
CONFIG_ALLOW_INSECURE_HTTP: "true"
feat(pangolin): Add Kubernetes controller manifests Create complete manifest set for Pangolin controller deployment: - RBAC with ServiceAccount, ClusterRole, and ClusterRoleBinding - ConfigMap with controller configuration (endpoint, namespace, leader election) - Deployment with resource limits, health probes, and security context - Service for metrics endpoint on port 8080 Controller will manage Traefik CRDs (IngressRoute, Middleware, TraefikService) and sync configuration from Pangolin API. Relates to DEV-397 Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-01 15:40:30 +00:00
TARGET_NAMESPACE: "pangolin"
ENABLE_LEADER_ELECTION: "true"
LOG_LEVEL: "info"
Reference in a new issue Copy permalink