2c8a7ca1e8
Created complete Kubernetes deployment for Pangolin SSO gateway: - PVC: 10Gi encrypted storage for data persistence - Deployment: fosrl/pangolin:1.21.0 with OIDC configuration - Resources: 200m/512Mi requests, 1000m/2Gi limits - Recreate strategy for single-replica deployment - Health probes configured - Service: ClusterIP on port 3001 - Ingress: pangolin.basicstack.de with TLS via cert-manager - SealedSecret: Contains admin password and OIDC credentials - Client ID: 6cb8db32-410b-4df6-b2af-298af447b09a - Integrated with Pocket ID at auth.basicstack.de - Authorized group: pangolin-admins - Argo CD Application: Automated sync with CreateNamespace OIDC authentication configured for pangolin-admins group members: - andreas.leinen@basicstack.de - admin@basicstack.de Co-Authored-By: Paperclip <noreply@paperclip.ing>
20 lines
462 B
YAML
20 lines
462 B
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: pangolin
|
|
namespace: argocd
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: git@forgejo.forgejo.svc.cluster.local:basicstack/stack.basicstack.de.git
|
|
targetRevision: main
|
|
path: apps/pangolin
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: pangolin
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|