bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

comms: mount vault signing key volume

Browse Source
This commit is contained in:
Brad Stein 2026-01-14 22:56:30 -03:00
parent 98cdafb162
commit 52cc04dee9
1 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
services/comms/helmrelease.yaml
View File

@ -253,13 +253,19 @@ spec:
- name: comms-vault-entrypoint
mountPath: /entrypoint.sh
subPath: vault-entrypoint.sh
- name: signingkey
mountPath: /synapse/keys
$patch: delete
- name: signingkey-writable
mountPath: /synapse/keys
volumes:
- name: signingkey
$patch: delete
- name: comms-vault-entrypoint
configMap:
name: comms-vault-entrypoint
defaultMode: 493
- name: signingkey
$patch: replace
- name: signingkey-writable
emptyDir: {}
- target:
kind: Deployment
@ -296,6 +302,18 @@ spec:
$patch: delete
- name: VAULT_ENV_FILE
value: /vault/secrets/redis-env.sh
livenessProbe:
exec:
command:
- sh
- -c
- . /vault/secrets/redis-env.sh && /health/ping_liveness_local.sh 5
readinessProbe:
exec:
command:
- sh
- -c
- . /vault/secrets/redis-env.sh && /health/ping_readiness_local.sh 1
volumeMounts:
- name: comms-vault-entrypoint
mountPath: /entrypoint.sh