basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Update Pangolin controller API key to new sealed secret

Browse source 
- Update sealed API key (abw3ud1ipko7ock...) in controller secret
- Remove insecure plaintext API key from ConfigMap
- Controller now uses only the sealed secret for authentication

No changes to main Pangolin deployment or database configuration.
Safe to deploy - no risk of database reinitialization.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-08-02 16:39:07 +00:00
parent 78e7a6d1ab
commit df3554eb97
2 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apps/pangolin/pangolin-controller-api-key-sealed.yaml
View file

@ -7,7 +7,7 @@ metadata:
namespace: pangolin namespace: pangolin
spec: spec:
encryptedData: encryptedData:
auth-header: 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 auth-header: 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
template: template:
metadata: metadata:
creationTimestamp: null creationTimestamp: null

1
apps/pangolin/pangolin-controller-config.yaml
View file

@ -5,7 +5,6 @@ metadata:
namespace: pangolin namespace: pangolin
data: data:
CONFIG_ENDPOINT: "http://pangolin.pangolin.svc.cluster.local:3000/api/v1/traefik-config" CONFIG_ENDPOINT: "http://pangolin.pangolin.svc.cluster.local:3000/api/v1/traefik-config"
CONFIG_AUTH_HEADER: "Bearer 5qid06u9j325kpk.ywd3bpsx34dtxyczgatyxuoxkzwhie7d72k6v4hw"
CONFIG_ALLOW_INSECURE_HTTP: "true" CONFIG_ALLOW_INSECURE_HTTP: "true"
TARGET_NAMESPACE: "pangolin" TARGET_NAMESPACE: "pangolin"
ENABLE_LEADER_ELECTION: "true" ENABLE_LEADER_ELECTION: "true"