apiVersion: v1
kind: ConfigMap
metadata:
  name: pangolin-controller-config
  namespace: pangolin
data:
  # The Traefik dynamic config endpoint lives on Pangolin's internal API port (3001),
  # not the external dashboard API (3000). The external port serves the session-authenticated
  # dashboard router which returns 401 for Bearer requests to /api/v1/traefik-config.
  CONFIG_ENDPOINT: "http://pangolin.pangolin.svc.cluster.local:3001/api/v1/traefik-config"
  CONFIG_ALLOW_INSECURE_HTTP: "true"
  TARGET_NAMESPACE: "pangolin"
  ENABLE_LEADER_ELECTION: "true"
  LOG_LEVEL: "info"