40c1857a7c
Traefik runs in kube-system, so the short DNS name "pangolin" that Pangolin's default `internal_hostname` uses does not resolve. Set both `server.internal_hostname` and `server.badger_override` to `pangolin.pangolin.svc.cluster.local` so the badger middleware and internal callbacks resolve from any namespace. Fixes the HTTP 500 on `https://paperclip.basicstack.de/` after cross-namespace IngressRoute wiring was fixed in DEV-457. Refs: DEV-457 Co-Authored-By: Paperclip <noreply@paperclip.ing>
48 lines
1.4 KiB
YAML
48 lines
1.4 KiB
YAML
---
|
|
# Pangolin ConfigMap
|
|
# The `postgres.connection_string` placeholder is replaced at pod startup
|
|
# by the render-config init container using DATABASE_URL from the sealed
|
|
# secret. See pangolin-deployment.yaml.
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: pangolin-config
|
|
namespace: pangolin
|
|
data:
|
|
config.yml.tmpl: |
|
|
gerbil:
|
|
start_port: 10000
|
|
base_endpoint: "pangolin.basicstack.de"
|
|
|
|
app:
|
|
dashboard_url: "https://pangolin.basicstack.de"
|
|
log_level: "info"
|
|
|
|
domains:
|
|
domain1:
|
|
base_domain: "basicstack.de"
|
|
|
|
server:
|
|
secret: "REPLACE_WITH_SECRET_FROM_SEALED_SECRET"
|
|
# DEV-457: Traefik runs in kube-system; the short hostname "pangolin"
|
|
# (Pangolin's default) doesn't resolve there. Point badger + internal
|
|
# callbacks at the FQDN so the badger middleware can call back to the
|
|
# Pangolin API.
|
|
internal_hostname: "pangolin.pangolin.svc.cluster.local"
|
|
badger_override: "http://pangolin.pangolin.svc.cluster.local:3001/api/v1"
|
|
cors:
|
|
origins:
|
|
- "https://pangolin.basicstack.de"
|
|
|
|
flags:
|
|
signup: true
|
|
verification: false
|
|
|
|
postgres:
|
|
connection_string: "__DATABASE_URL__"
|
|
|
|
oidc:
|
|
enabled: true
|
|
issuer: "https://auth.basicstack.de"
|
|
callback_url: "https://pangolin.basicstack.de/auth/callback"
|
|
scopes: "openid profile email groups"
|