stack.basicstack.de/apps/pangolin/controller/controller-serviceaccount.yaml
CTO Agent d5618fb6c8 Deploy pangolin-kube-controller for Pangolin access policies
Add pangolin-kube-controller deployment to enable Pangolin-based access
policies for Kubernetes ingress resources.

Controller configuration:
- Image: ghcr.io/fosrl/pangolin-kube-controller:0.1.0-alpha.1
- API endpoint: https://pangolin.basicstack.de/api/v1/traefik-config
- Target namespace: pangolin
- Polling interval: 15s
- Leader election: disabled (single replica)

Includes:
- ServiceAccount for controller pod
- ClusterRole with required RBAC permissions for Traefik CRDs
- Deployment with proper security context and resource limits
- Service for metrics endpoint (:9090)

Related: DEV-437

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-02 10:07:50 +00:00

11 lines
298 B
YAML

---
# ServiceAccount for pangolin-kube-controller
apiVersion: v1
kind: ServiceAccount
metadata:
name: pangolin-kube-controller
namespace: pangolin
labels:
app.kubernetes.io/name: pangolin-kube-controller
app.kubernetes.io/component: controller
app.kubernetes.io/part-of: pangolin