comms: restore livekit token env

services/comms/livekit-token-deployment.yaml

@@ -34,29 +34,21 @@ spec:
       containers:
         - name: token-service
           image: ghcr.io/element-hq/lk-jwt-service:0.3.0
-          command:
-            - /bin/sh
-            - -c
-            - |
-              . /vault/scripts/comms_vault_env.sh
-              exec /lk-jwt-service
           env:
             - name: LIVEKIT_URL
               value: wss://kit.live.bstein.dev/livekit/sfu
             - name: LIVEKIT_KEY
               value: primary
+            - name: LIVEKIT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: livekit-api
+                  key: primary
             - name: LIVEKIT_FULL_ACCESS_HOMESERVERS
               value: live.bstein.dev
           ports:
             - containerPort: 8080
               name: http
-          volumeMounts:
-            - name: vault-secrets
-              mountPath: /vault/secrets
-              readOnly: true
-            - name: vault-scripts
-              mountPath: /vault/scripts
-              readOnly: true
           resources:
             requests:
               cpu: 50m
@@ -65,16 +57,6 @@ spec:
               cpu: 300m
               memory: 256Mi
       volumes:
-        - name: vault-secrets
-          csi:
-            driver: secrets-store.csi.k8s.io
-            readOnly: true
-            volumeAttributes:
-              secretProviderClass: comms-vault
-        - name: vault-scripts
-          configMap:
-            name: comms-vault-env
-            defaultMode: 0555
 ---
 apiVersion: v1
 kind: Service