From 1bcb9baba25ef589acc549b1c959a3a6d8d918d5 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Wed, 7 Jan 2026 09:31:46 -0300
Subject: [PATCH] comms: ensure seeder is Synapse admin

---
 services/communication/kustomization.yaml     |  1 +
 .../synapse-seeder-admin-ensure-job.yaml      | 37 +++++++++++++++++++
 2 files changed, 38 insertions(+)
 create mode 100644 services/communication/synapse-seeder-admin-ensure-job.yaml

diff --git a/services/communication/kustomization.yaml b/services/communication/kustomization.yaml
index e651976..42aa7ea 100644
--- a/services/communication/kustomization.yaml
+++ b/services/communication/kustomization.yaml
@@ -6,6 +6,7 @@ resources:
   - atlasbot-rbac.yaml
   - synapse-rendered.yaml
   - synapse-signingkey-ensure-job.yaml
+  - synapse-seeder-admin-ensure-job.yaml
   - mas-configmap.yaml
   - mas-admin-client-secret-ensure-job.yaml
   - mas-deployment.yaml
diff --git a/services/communication/synapse-seeder-admin-ensure-job.yaml b/services/communication/synapse-seeder-admin-ensure-job.yaml
new file mode 100644
index 0000000..8d92ccd
--- /dev/null
+++ b/services/communication/synapse-seeder-admin-ensure-job.yaml
@@ -0,0 +1,37 @@
+# services/communication/synapse-seeder-admin-ensure-job.yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: synapse-seeder-admin-ensure-1
+  namespace: comms
+spec:
+  backoffLimit: 2
+  template:
+    spec:
+      restartPolicy: OnFailure
+      containers:
+        - name: psql
+          image: postgres:16-alpine
+          env:
+            - name: PGHOST
+              value: postgres-service.postgres.svc.cluster.local
+            - name: PGPORT
+              value: "5432"
+            - name: PGDATABASE
+              value: synapse
+            - name: PGUSER
+              value: synapse
+            - name: PGPASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: synapse-db
+                  key: POSTGRES_PASSWORD
+          command:
+            - /bin/sh
+            - -c
+            - |
+              set -euo pipefail
+              psql -v ON_ERROR_STOP=1 <<'SQL'
+              UPDATE users SET admin = 1 WHERE name = '@othrys-seeder:live.bstein.dev';
+              SQL
+