bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

comms(mas): fix admin secret job permissions

Browse Source
This commit is contained in:
Brad Stein 2026-01-01 18:12:21 -03:00
parent ae335fcff2
commit 0a7410302d
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
services/communication/mas-admin-client-secret-ensure-job.yaml
View File

@ -33,14 +33,14 @@ subjects:
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: mas-admin-client-secret-ensure-5 name: mas-admin-client-secret-ensure-6
namespace: comms namespace: comms
spec: spec:
backoffLimit: 0 backoffLimit: 2
template: template:
spec: spec:
serviceAccountName: mas-admin-client-secret-writer serviceAccountName: mas-admin-client-secret-writer
restartPolicy: Never restartPolicy: OnFailure
volumes: volumes:
- name: work - name: work
emptyDir: {} emptyDir: {}
@ -53,6 +53,7 @@ spec:
set -euo pipefail set -euo pipefail
umask 077 umask 077
dd if=/dev/urandom bs=32 count=1 2>/dev/null | od -An -tx1 | tr -d ' \n' > /work/client_secret dd if=/dev/urandom bs=32 count=1 2>/dev/null | od -An -tx1 | tr -d ' \n' > /work/client_secret
chmod 0644 /work/client_secret
volumeMounts: volumeMounts:
- name: work - name: work
mountPath: /work mountPath: /work