From 9b1af12d1bd8895f426fd63571c7897833ce91a9 Mon Sep 17 00:00:00 2001 From: CTO Agent Date: Sun, 2 Aug 2026 10:14:20 +0000 Subject: [PATCH] Add missing Traefik CRD permissions to pangolin-controller RBAC Extend ClusterRole to include all Traefik CRDs that the controller manages: - serverstransports, serverstransporttcps (for transport configuration) - ingressroutetcps, ingressrouteudps (for TCP/UDP routing) - middlewaretcps (for TCP middleware) - tlsoptions, tlsstores (for TLS configuration) This fixes the RBAC permission error preventing the controller from reconciling Traefik configuration: "serverstransports.traefik.io is forbidden: User \"system:serviceaccount:pangolin:pangolin-controller\" cannot list resource \"serverstransports\"" Related: DEV-437 Co-Authored-By: Paperclip --- apps/pangolin/pangolin-controller-rbac.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/apps/pangolin/pangolin-controller-rbac.yaml b/apps/pangolin/pangolin-controller-rbac.yaml index 029331b..4f17c58 100644 --- a/apps/pangolin/pangolin-controller-rbac.yaml +++ b/apps/pangolin/pangolin-controller-rbac.yaml @@ -31,8 +31,15 @@ rules: - traefik.io resources: - ingressroutes + - ingressroutetcps + - ingressrouteudps - middlewares + - middlewaretcps - traefikservices + - serverstransports + - serverstransporttcps + - tlsoptions + - tlsstores verbs: - get - list