stack.basicstack.de/apps/pangolin
CTO Agent 2c8a7ca1e8 Add Pangolin Kubernetes manifests
Created complete Kubernetes deployment for Pangolin SSO gateway:

- PVC: 10Gi encrypted storage for data persistence
- Deployment: fosrl/pangolin:1.21.0 with OIDC configuration
  - Resources: 200m/512Mi requests, 1000m/2Gi limits
  - Recreate strategy for single-replica deployment
  - Health probes configured
- Service: ClusterIP on port 3001
- Ingress: pangolin.basicstack.de with TLS via cert-manager
- SealedSecret: Contains admin password and OIDC credentials
  - Client ID: 6cb8db32-410b-4df6-b2af-298af447b09a
  - Integrated with Pocket ID at auth.basicstack.de
  - Authorized group: pangolin-admins
- Argo CD Application: Automated sync with CreateNamespace

OIDC authentication configured for pangolin-admins group members:
- andreas.leinen@basicstack.de
- admin@basicstack.de

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-26 12:09:07 +00:00
..
.gitkeep Add Pangolin repository structure and DNS configuration 2026-07-26 11:58:00 +00:00
namespace.yaml Add Pangolin repository structure and DNS configuration 2026-07-26 11:58:00 +00:00
pangolin-deployment.yaml Add Pangolin Kubernetes manifests 2026-07-26 12:09:07 +00:00
pangolin-secrets-sealed.yaml Add Pangolin Kubernetes manifests 2026-07-26 12:09:07 +00:00