From 1c9716d8553bb38a75d860b822fbeae6ae180fd1 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sun, 5 Apr 2026 10:18:13 -0300
Subject: [PATCH] maintenance: pass bastion key into metis env

---
 services/maintenance/metis-deployment.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/services/maintenance/metis-deployment.yaml b/services/maintenance/metis-deployment.yaml
index cf725d94..3bf11907 100644
--- a/services/maintenance/metis-deployment.yaml
+++ b/services/maintenance/metis-deployment.yaml
@@ -18,7 +18,7 @@ spec:
         prometheus.io/scrape: "true"
         prometheus.io/port: "8080"
         prometheus.io/path: "/metrics"
-        metis.bstein.dev/config-rev: "2026-04-02-02"
+        metis.bstein.dev/config-rev: "2026-04-05-01"
     spec:
       serviceAccountName: metis
       terminationGracePeriodSeconds: 30
@@ -48,6 +48,12 @@ spec:
                   name: metis-ssh-keys
                   key: brad_pub
                   optional: true
+            - name: METIS_SSH_KEY_BASTION
+              valueFrom:
+                secretKeyRef:
+                  name: metis-ssh-keys
+                  key: bastion_pub
+                  optional: true
             - name: METIS_SSH_KEY_HECATE_TETHYS
               valueFrom:
                 secretKeyRef: