CTO Agent
3905fb1037
Fix Pangolin config: use YAML format with required fields
...
Pangolin requires config/config.yml (YAML, not TOML) with specific required fields:
- gerbil.start_port, gerbil.base_endpoint
- app.dashboard_url, app.log_level
- domains.domain1.base_domain
- server.secret, server.cors.origins
- flags (signup, verification)
- database.path
- oidc configuration
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:23:19 +00:00
CTO Agent
0447c7378f
Use environment-specific config filename (prod.toml)
...
Pangolin with ENVIRONMENT=prod likely looks for prod.toml in the config directory.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:21:07 +00:00
CTO Agent
954b27d457
Try mounting config at /config.toml
...
Testing different config file location to match Pangolin's expectations.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:20:34 +00:00
CTO Agent
af85adbd53
Fix Pangolin config file mount path
...
Mount config file to /app/config/config.toml instead of /app/config.toml as the application expects it in the config directory.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:19:25 +00:00
CTO Agent
1c740828ed
Add Pangolin configuration file
...
Pangolin requires a config.toml file to start. Added ConfigMap with basic configuration including URL, database path, and OIDC settings. Updated deployment to mount the config file.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:17:14 +00:00
CTO Agent
3d0d5f3f3a
Reduce Pangolin resource requests for initial deployment
...
Cluster nodes are at 93-99% memory capacity. Reduced requests from 512Mi to 256Mi and CPU from 200m to 100m to allow pod scheduling.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:14:42 +00:00
CTO Agent
2c8a7ca1e8
Add Pangolin Kubernetes manifests
...
Created complete Kubernetes deployment for Pangolin SSO gateway:
- PVC: 10Gi encrypted storage for data persistence
- Deployment: fosrl/pangolin:1.21.0 with OIDC configuration
- Resources: 200m/512Mi requests, 1000m/2Gi limits
- Recreate strategy for single-replica deployment
- Health probes configured
- Service: ClusterIP on port 3001
- Ingress: pangolin.basicstack.de with TLS via cert-manager
- SealedSecret: Contains admin password and OIDC credentials
- Client ID: 6cb8db32-410b-4df6-b2af-298af447b09a
- Integrated with Pocket ID at auth.basicstack.de
- Authorized group: pangolin-admins
- Argo CD Application: Automated sync with CreateNamespace
OIDC authentication configured for pangolin-admins group members:
- andreas.leinen@basicstack.de
- admin@basicstack.de
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:09:07 +00:00
