basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Add missing Traefik CRD permissions to pangolin-controller RBAC

Browse source 
Extend ClusterRole to include all Traefik CRDs that the controller manages:
- serverstransports, serverstransporttcps (for transport configuration)
- ingressroutetcps, ingressrouteudps (for TCP/UDP routing)
- middlewaretcps (for TCP middleware)
- tlsoptions, tlsstores (for TLS configuration)

This fixes the RBAC permission error preventing the controller from
reconciling Traefik configuration: "serverstransports.traefik.io is
forbidden: User \"system:serviceaccount:pangolin:pangolin-controller\"
cannot list resource \"serverstransports\""

Related: DEV-437

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-08-02 10:14:20 +00:00
parent 22823ba599
commit 9b1af12d1b
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
apps/pangolin/pangolin-controller-rbac.yaml
View file

@ -31,8 +31,15 @@ rules:
- traefik.io - traefik.io
resources: resources:
- ingressroutes - ingressroutes
- ingressroutetcps
- ingressrouteudps
- middlewares - middlewares
- middlewaretcps
- traefikservices - traefikservices
- serverstransports
- serverstransporttcps
- tlsoptions
- tlsstores
verbs: verbs:
- get - get
- list - list