ca23917797
Pangolin's PostgreSQL build requires postgres.connection_string in config.yml — DATABASE_URL alone is not honored as an override, so the container was crashing with "Postgres configuration is missing in the configuration file". Render the final config.yml at pod startup via a busybox init container that substitutes the DATABASE_URL secret into a __DATABASE_URL__ placeholder in the ConfigMap template, then mount the rendered file into the pangolin container. Co-Authored-By: Paperclip <noreply@paperclip.ing>
42 lines
1,005 B
YAML
42 lines
1,005 B
YAML
---
|
|
# Pangolin ConfigMap
|
|
# The `postgres.connection_string` placeholder is replaced at pod startup
|
|
# by the render-config init container using DATABASE_URL from the sealed
|
|
# secret. See pangolin-deployment.yaml.
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: pangolin-config
|
|
namespace: pangolin
|
|
data:
|
|
config.yml.tmpl: |
|
|
gerbil:
|
|
start_port: 10000
|
|
base_endpoint: "pangolin.basicstack.de"
|
|
|
|
app:
|
|
dashboard_url: "https://pangolin.basicstack.de"
|
|
log_level: "info"
|
|
|
|
domains:
|
|
domain1:
|
|
base_domain: "basicstack.de"
|
|
|
|
server:
|
|
secret: "REPLACE_WITH_SECRET_FROM_SEALED_SECRET"
|
|
cors:
|
|
origins:
|
|
- "https://pangolin.basicstack.de"
|
|
|
|
flags:
|
|
signup: true
|
|
verification: false
|
|
|
|
postgres:
|
|
connection_string: "__DATABASE_URL__"
|
|
|
|
oidc:
|
|
enabled: true
|
|
issuer: "https://auth.basicstack.de"
|
|
callback_url: "https://pangolin.basicstack.de/auth/callback"
|
|
scopes: "openid profile email groups"
|