From a41ac1548cb51aeaafa07f6974766a6f74180b4c Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Wed, 21 Jan 2026 04:05:41 -0300
Subject: [PATCH] maintenance: fix ariadne comms endpoints and exec RBAC

---
 services/maintenance/ariadne-deployment.yaml | 8 ++++----
 services/maintenance/ariadne-rbac.yaml       | 1 +
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/services/maintenance/ariadne-deployment.yaml b/services/maintenance/ariadne-deployment.yaml
index bb9766f..069f388 100644
--- a/services/maintenance/ariadne-deployment.yaml
+++ b/services/maintenance/ariadne-deployment.yaml
@@ -202,13 +202,13 @@ spec:
             - name: COMMS_NAMESPACE
               value: comms
             - name: COMMS_SYNAPSE_BASE
-              value: http://othrys-synapse-matrix-synapse:8008
+              value: http://othrys-synapse-matrix-synapse.comms.svc.cluster.local:8008
             - name: COMMS_AUTH_BASE
-              value: http://matrix-authentication-service:8080
+              value: http://matrix-authentication-service.comms.svc.cluster.local:8080
             - name: COMMS_MAS_ADMIN_API_BASE
-              value: http://matrix-authentication-service:8081/api/admin/v1
+              value: http://matrix-authentication-service.comms.svc.cluster.local:8081/api/admin/v1
             - name: COMMS_MAS_TOKEN_URL
-              value: http://matrix-authentication-service:8080/oauth2/token
+              value: http://matrix-authentication-service.comms.svc.cluster.local:8080/oauth2/token
             - name: COMMS_MAS_ADMIN_CLIENT_ID
               value: 01KDXMVQBQ5JNY6SEJPZW6Z8BM
             - name: COMMS_SERVER_NAME
diff --git a/services/maintenance/ariadne-rbac.yaml b/services/maintenance/ariadne-rbac.yaml
index 8a063bf..88689cb 100644
--- a/services/maintenance/ariadne-rbac.yaml
+++ b/services/maintenance/ariadne-rbac.yaml
@@ -25,6 +25,7 @@ rules:
     resources:
       - pods/exec
     verbs:
+      - get
       - create
 
 ---