bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

maintenance: tighten metis auth and roll inventory update

Browse Source
This commit is contained in:
Brad Stein 2026-04-01 10:31:06 -03:00
parent 5e188e6b8a
commit a02e42b1ea
3 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
services/maintenance/metis-configmap.yaml
View File

@ -11,11 +11,11 @@ data:
METIS_DEFAULT_FLASH_HOST: titan-22 METIS_DEFAULT_FLASH_HOST: titan-22
METIS_FLASH_HOSTS: titan-22 METIS_FLASH_HOSTS: titan-22
METIS_LOCAL_HOST: titan-22 METIS_LOCAL_HOST: titan-22
METIS_ALLOWED_GROUPS: admin,maintenance,maintainer METIS_ALLOWED_GROUPS: admin,maintenance
METIS_MAX_DEVICE_BYTES: "300000000000" METIS_MAX_DEVICE_BYTES: "300000000000"
METIS_NAMESPACE: maintenance METIS_NAMESPACE: maintenance
METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-14-amd64 METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-15-amd64
METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-14-arm64 METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-15-arm64
METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_REGISTRY: registry.bstein.dev
METIS_HARBOR_PROJECT: metis METIS_HARBOR_PROJECT: metis
METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0

2
services/maintenance/metis-deployment.yaml
View File

@ -27,7 +27,7 @@ spec:
node-role.kubernetes.io/accelerator: "true" node-role.kubernetes.io/accelerator: "true"
containers: containers:
- name: metis - name: metis
image: registry.bstein.dev/bstein/metis:0.1.0-14-amd64 image: registry.bstein.dev/bstein/metis:0.1.0-15-amd64
imagePullPolicy: Always imagePullPolicy: Always
envFrom: envFrom:
- configMapRef: - configMapRef:

2
services/maintenance/oauth2-proxy-metis.yaml
View File

@ -82,8 +82,6 @@ spec:
- --allowed-group=/admin - --allowed-group=/admin
- --allowed-group=maintenance - --allowed-group=maintenance
- --allowed-group=/maintenance - --allowed-group=/maintenance
- --allowed-group=maintainer
- --allowed-group=/maintainer
- --set-xauthrequest=true - --set-xauthrequest=true
- --pass-access-token=true - --pass-access-token=true
- --set-authorization-header=true - --set-authorization-header=true