From 0fc5ac3041cb794a68ef4a4ad68fb4abd7d25679 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sun, 5 Apr 2026 10:07:09 -0300
Subject: [PATCH] maintenance/metis: read optional ssh pubkeys from secret env

---
 services/maintenance/metis-deployment.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/services/maintenance/metis-deployment.yaml b/services/maintenance/metis-deployment.yaml
index 5ee76dcf..cf725d94 100644
--- a/services/maintenance/metis-deployment.yaml
+++ b/services/maintenance/metis-deployment.yaml
@@ -42,6 +42,18 @@ spec:
                   name: metis-runtime
                   key: k3s_token
                   optional: true
+            - name: METIS_SSH_KEY_BRAD
+              valueFrom:
+                secretKeyRef:
+                  name: metis-ssh-keys
+                  key: brad_pub
+                  optional: true
+            - name: METIS_SSH_KEY_HECATE_TETHYS
+              valueFrom:
+                secretKeyRef:
+                  name: metis-ssh-keys
+                  key: hecate_tethys_pub
+                  optional: true
           ports:
             - name: http
               containerPort: 8080