bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

jobs: drop apk in kubectl image

Browse Source
This commit is contained in:
Brad Stein 2026-01-14 05:41:01 -03:00
parent 6898641b0a
commit 9ec08e1dc2
5 changed files with 0 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
services/comms/comms-secrets-ensure-job.yaml
View File

@ -20,7 +20,6 @@ spec:
set -eu set -eu
trap 'echo "comms-secrets-ensure failed"; sleep 300' ERR trap 'echo "comms-secrets-ensure failed"; sleep 300' ERR
umask 077 umask 077
apk add --no-cache curl jq >/dev/null
safe_pass() { safe_pass() {
head -c 32 /dev/urandom | base64 | tr -d '\n' | tr '+/' '-_' | tr -d '=' head -c 32 /dev/urandom | base64 | tr -d '\n' | tr '+/' '-_' | tr -d '='

2
services/comms/mas-admin-client-secret-ensure-job.yaml
View File

@ -67,8 +67,6 @@ spec:
args: args:
- | - |
set -euo pipefail set -euo pipefail
apk add --no-cache curl jq >/dev/null
vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}" vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}"
vault_role="${VAULT_ROLE:-comms-secrets}" vault_role="${VAULT_ROLE:-comms-secrets}"
jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)"

2
services/comms/mas-db-ensure-job.yaml
View File

@ -24,8 +24,6 @@ spec:
head -c 32 /dev/urandom | base64 | tr -d '\n' | tr '+/' '-_' | tr -d '=' head -c 32 /dev/urandom | base64 | tr -d '\n' | tr '+/' '-_' | tr -d '='
} }
apk add --no-cache curl jq >/dev/null
vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}" vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}"
vault_role="${VAULT_ROLE:-comms-secrets}" vault_role="${VAULT_ROLE:-comms-secrets}"
jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)"

2
services/comms/synapse-signingkey-ensure-job.yaml
View File

@ -37,8 +37,6 @@ spec:
args: args:
- | - |
set -euo pipefail set -euo pipefail
apk add --no-cache curl jq >/dev/null
vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}" vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}"
vault_role="${VAULT_ROLE:-comms-secrets}" vault_role="${VAULT_ROLE:-comms-secrets}"
jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)"

2
services/keycloak/mas-secrets-ensure-job.yaml
View File

@ -95,8 +95,6 @@ spec:
args: args:
- | - |
set -euo pipefail set -euo pipefail
apk add --no-cache curl jq >/dev/null
vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}" vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}"
vault_role="${VAULT_ROLE:-sso-secrets}" vault_role="${VAULT_ROLE:-sso-secrets}"
jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)"