- Use specific image version 0.1.0-alpha.1 instead of :latest - Fix API endpoint port from 3001 to 3000 (correct Pangolin service port) - Add CONFIG_ALLOW_INSECURE_HTTP for internal cluster HTTP communication - Fix security context with numeric UIDs (65532) to avoid runAsNonRoot error - Add required RBAC permissions for CRD and IngressClass discovery Controller now successfully starts and acquires leader lease. Next step: Configure API authentication (CONFIG_AUTH_HEADER) for controller to access Pangolin API endpoint. Co-Authored-By: Paperclip <noreply@paperclip.ing>
11 lines
316 B
YAML
11 lines
316 B
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: pangolin-controller-config
|
|
namespace: pangolin
|
|
data:
|
|
CONFIG_ENDPOINT: "http://pangolin.pangolin.svc.cluster.local:3000/api/v1/traefik-config"
|
|
CONFIG_ALLOW_INSECURE_HTTP: "true"
|
|
TARGET_NAMESPACE: "pangolin"
|
|
ENABLE_LEADER_ELECTION: "true"
|
|
LOG_LEVEL: "info"
|