d5618fb6c8
Add pangolin-kube-controller deployment to enable Pangolin-based access policies for Kubernetes ingress resources. Controller configuration: - Image: ghcr.io/fosrl/pangolin-kube-controller:0.1.0-alpha.1 - API endpoint: https://pangolin.basicstack.de/api/v1/traefik-config - Target namespace: pangolin - Polling interval: 15s - Leader election: disabled (single replica) Includes: - ServiceAccount for controller pod - ClusterRole with required RBAC permissions for Traefik CRDs - Deployment with proper security context and resource limits - Service for metrics endpoint (:9090) Related: DEV-437 Co-Authored-By: Paperclip <noreply@paperclip.ing>
20 lines
462 B
YAML
20 lines
462 B
YAML
---
|
|
# Service for pangolin-kube-controller metrics
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: pangolin-kube-controller
|
|
namespace: pangolin
|
|
labels:
|
|
app.kubernetes.io/name: pangolin-kube-controller
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/part-of: pangolin
|
|
spec:
|
|
type: ClusterIP
|
|
selector:
|
|
app.kubernetes.io/name: pangolin-kube-controller
|
|
ports:
|
|
- name: metrics
|
|
port: 9090
|
|
targetPort: 9090
|
|
protocol: TCP
|