From 04817691c6d9fcb4a975d982d0a2531d413df058 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 8 Jan 2026 03:38:51 -0300
Subject: [PATCH] sso: strip mas secret newlines

---
 services/keycloak/mas-secrets-ensure-job.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/services/keycloak/mas-secrets-ensure-job.yaml b/services/keycloak/mas-secrets-ensure-job.yaml
index 88a4ef4..230473c 100644
--- a/services/keycloak/mas-secrets-ensure-job.yaml
+++ b/services/keycloak/mas-secrets-ensure-job.yaml
@@ -8,7 +8,7 @@ metadata:
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: mas-secrets-ensure-9
+  name: mas-secrets-ensure-10
   namespace: sso
 spec:
   backoffLimit: 0
@@ -64,8 +64,8 @@ spec:
               fi
 
               printf '%s' "$CLIENT_SECRET" > /work/keycloak_client_secret
-              openssl rand -hex 32 > /work/encryption
-              openssl rand -hex 32 > /work/matrix_shared_secret
+              openssl rand -hex 32 | tr -d '\n' > /work/encryption
+              openssl rand -hex 32 | tr -d '\n' > /work/matrix_shared_secret
               openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:4096 -out /work/rsa_key >/dev/null 2>&1
               chmod 0644 /work/*
           env: