bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

maintenance: tighten metis auth and roll inventory update

Browse Source
This commit is contained in:
Brad Stein 2026-04-01 10:31:06 -03:00
parent 5e188e6b8a
commit a02e42b1ea
3 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
services/maintenance/metis-configmap.yaml
View File

@ -11,11 +11,11 @@ data:
METIS_DEFAULT_FLASH_HOST: titan-22
METIS_FLASH_HOSTS: titan-22
METIS_LOCAL_HOST: titan-22
METIS_ALLOWED_GROUPS: admin,maintenance,maintainer
METIS_ALLOWED_GROUPS: admin,maintenance
METIS_MAX_DEVICE_BYTES: "300000000000"
METIS_NAMESPACE: maintenance
METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-14-amd64
METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-14-arm64
METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-15-amd64
METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-15-arm64
METIS_HARBOR_REGISTRY: registry.bstein.dev
METIS_HARBOR_PROJECT: metis
METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0

2
services/maintenance/metis-deployment.yaml
View File

@ -27,7 +27,7 @@ spec:
node-role.kubernetes.io/accelerator: "true"
containers:
- name: metis
image: registry.bstein.dev/bstein/metis:0.1.0-14-amd64
image: registry.bstein.dev/bstein/metis:0.1.0-15-amd64
imagePullPolicy: Always
envFrom:
- configMapRef:

2
services/maintenance/oauth2-proxy-metis.yaml
View File

@ -82,8 +82,6 @@ spec:
- --allowed-group=/admin
- --allowed-group=maintenance
- --allowed-group=/maintenance
- --allowed-group=maintainer
- --allowed-group=/maintainer
- --set-xauthrequest=true
- --pass-access-token=true
- --set-authorization-header=true