bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

comms: ensure synapse admin flag; ariadne vault role

Browse Source
This commit is contained in:
Brad Stein 2026-02-07 10:28:55 -03:00
parent 8c931f6a58
commit 917ee077ad
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
services/comms/oneoffs/synapse-admin-ensure-job.yaml
View File

@ -185,6 +185,10 @@ spec:
cols = get_cols(cur) cols = get_cols(cur)
if "admin" not in cols: if "admin" not in cols:
raise RuntimeError("users.admin column missing") raise RuntimeError("users.admin column missing")
cur.execute(
"UPDATE users SET admin = TRUE WHERE name = %s",
(user_id,),
)
cur.execute( cur.execute(
""" """
SELECT token FROM access_tokens SELECT token FROM access_tokens

4
services/maintenance/ariadne-deployment.yaml
View File

@ -18,7 +18,7 @@ spec:
prometheus.io/scrape: "true" prometheus.io/scrape: "true"
prometheus.io/port: "8080" prometheus.io/port: "8080"
prometheus.io/path: "/metrics" prometheus.io/path: "/metrics"
maintenance.bstein.dev/restart-rev: "20260207-1" maintenance.bstein.dev/restart-rev: "20260207-2"
vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-inject: "true"
vault.hashicorp.com/role: "maintenance" vault.hashicorp.com/role: "maintenance"
vault.hashicorp.com/agent-inject-secret-ariadne-env.sh: "kv/data/atlas/maintenance/ariadne-db" vault.hashicorp.com/agent-inject-secret-ariadne-env.sh: "kv/data/atlas/maintenance/ariadne-db"
@ -151,6 +151,8 @@ spec:
value: "10" value: "10"
- name: ARIADNE_RUN_MIGRATIONS - name: ARIADNE_RUN_MIGRATIONS
value: "false" value: "false"
- name: VAULT_K8S_ROLE
value: maintenance
- name: PORTAL_ADMIN_USERS - name: PORTAL_ADMIN_USERS
value: bstein value: bstein
- name: PORTAL_ADMIN_GROUPS - name: PORTAL_ADMIN_GROUPS