communication: syn2mas migrate mount MAS secrets

services/communication/mas-syn2mas-migrate-job.yaml

@@ -2,14 +2,14 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: mas-syn2mas-migrate
+  name: mas-syn2mas-migrate-v2
   namespace: communication
 spec:
   backoffLimit: 0
   template:
     metadata:
       labels:
-        app: mas-syn2mas-migrate
+        app: mas-syn2mas-migrate-v2
     spec:
       enableServiceLinks: false
       restartPolicy: Never
@@ -100,6 +100,12 @@ spec:
             - name: rendered
               mountPath: /rendered
               readOnly: true
+            - name: mas-secrets
+              mountPath: /etc/mas/secrets
+              readOnly: true
+            - name: mas-keys
+              mountPath: /etc/mas/keys
+              readOnly: true
             - name: synapse-config
               mountPath: /synapse-config
               readOnly: true
@@ -115,6 +121,22 @@ spec:
                 path: config.yaml
         - name: rendered
           emptyDir: {}
+        - name: mas-secrets
+          secret:
+            secretName: mas-secrets-runtime
+            items:
+              - key: encryption
+                path: encryption
+              - key: matrix_shared_secret
+                path: matrix_shared_secret
+              - key: keycloak_client_secret
+                path: keycloak_client_secret
+        - name: mas-keys
+          secret:
+            secretName: mas-secrets-runtime
+            items:
+              - key: rsa_key
+                path: rsa_key
         - name: synapse-config
           configMap:
             name: othrys-synapse-matrix-synapse