From df3554eb97d44b587ab32240e03de0cdfc043388 Mon Sep 17 00:00:00 2001 From: CTO Agent Date: Sun, 2 Aug 2026 16:39:07 +0000 Subject: [PATCH] Update Pangolin controller API key to new sealed secret - Update sealed API key (abw3ud1ipko7ock...) in controller secret - Remove insecure plaintext API key from ConfigMap - Controller now uses only the sealed secret for authentication No changes to main Pangolin deployment or database configuration. Safe to deploy - no risk of database reinitialization. Co-Authored-By: Paperclip --- apps/pangolin/pangolin-controller-api-key-sealed.yaml | 2 +- apps/pangolin/pangolin-controller-config.yaml | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/apps/pangolin/pangolin-controller-api-key-sealed.yaml b/apps/pangolin/pangolin-controller-api-key-sealed.yaml index 7aff247..c192271 100644 --- a/apps/pangolin/pangolin-controller-api-key-sealed.yaml +++ b/apps/pangolin/pangolin-controller-api-key-sealed.yaml @@ -7,7 +7,7 @@ metadata: namespace: pangolin spec: encryptedData: - auth-header: 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 + auth-header: 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 template: metadata: creationTimestamp: null diff --git a/apps/pangolin/pangolin-controller-config.yaml b/apps/pangolin/pangolin-controller-config.yaml index 968ba8b..4304194 100644 --- a/apps/pangolin/pangolin-controller-config.yaml +++ b/apps/pangolin/pangolin-controller-config.yaml @@ -5,7 +5,6 @@ metadata: namespace: pangolin data: CONFIG_ENDPOINT: "http://pangolin.pangolin.svc.cluster.local:3000/api/v1/traefik-config" - CONFIG_AUTH_HEADER: "Bearer 5qid06u9j325kpk.ywd3bpsx34dtxyczgatyxuoxkzwhie7d72k6v4hw" CONFIG_ALLOW_INSECURE_HTTP: "true" TARGET_NAMESPACE: "pangolin" ENABLE_LEADER_ELECTION: "true"