maintenance/metis: read optional ssh pubkeys from secret env

2026-04-05 10:07:09 -03:00 · 2026-04-05 10:07:09 -03:00 · 0fc5ac3041
commit 0fc5ac3041
parent a1cd9fe7a7
1 changed files with 12 additions and 0 deletions
--- a/services/maintenance/metis-deployment.yaml
+++ b/services/maintenance/metis-deployment.yaml
@ -42,6 +42,18 @@ spec:
                  name: metis-runtime
                  key: k3s_token
                  optional: true
+            - name: METIS_SSH_KEY_BRAD
+              valueFrom:
+                secretKeyRef:
+                  name: metis-ssh-keys
+                  key: brad_pub
+                  optional: true
+            - name: METIS_SSH_KEY_HECATE_TETHYS
+              valueFrom:
+                secretKeyRef:
+                  name: metis-ssh-keys
+                  key: hecate_tethys_pub
+                  optional: true
          ports:
            - name: http
              containerPort: 8080