From 220cc1f31a7c033c068efe568b31024c6aa76509 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 8 Jan 2026 03:56:18 -0300
Subject: [PATCH] sso: run synapse oidc job with kubectl

---
 services/keycloak/synapse-oidc-secret-ensure-job.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/services/keycloak/synapse-oidc-secret-ensure-job.yaml b/services/keycloak/synapse-oidc-secret-ensure-job.yaml
index 6468fd8..69a6698 100644
--- a/services/keycloak/synapse-oidc-secret-ensure-job.yaml
+++ b/services/keycloak/synapse-oidc-secret-ensure-job.yaml
@@ -2,7 +2,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: synapse-oidc-secret-ensure-1
+  name: synapse-oidc-secret-ensure-2
   namespace: sso
 spec:
   backoffLimit: 0
@@ -13,12 +13,13 @@ spec:
       restartPolicy: Never
       containers:
         - name: apply
-          image: alpine:3.20
+          image: bitnami/kubectl:latest
           command: ["/bin/sh", "-c"]
           args:
             - |
               set -euo pipefail
-              apk add --no-cache curl jq >/dev/null
+              apt-get update >/dev/null
+              apt-get install -y curl jq >/dev/null
 
               KC_URL="http://keycloak.sso.svc.cluster.local"
               ACCESS_TOKEN=""