bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

comms: allow postgres exec for mas db

Browse Source
This commit is contained in:
Brad Stein 2026-01-08 03:06:34 -03:00
parent 0250de8636
commit e18accc099
2 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
services/comms/mas-db-ensure-job.yaml
View File

@ -2,7 +2,7 @@
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: mas-db-ensure-7 name: mas-db-ensure-8
namespace: comms namespace: comms
spec: spec:
backoffLimit: 0 backoffLimit: 0
@ -26,9 +26,9 @@ spec:
kubectl -n comms create secret generic mas-db --from-literal=password="${MAS_PASS}" >/dev/null kubectl -n comms create secret generic mas-db --from-literal=password="${MAS_PASS}" >/dev/null
fi fi
POD_NAME="postgres-0" POD_NAME="$(kubectl -n postgres get pods -l app=postgres -o jsonpath='{.items[0].metadata.name}')"
if ! kubectl -n postgres get pod "${POD_NAME}" >/dev/null 2>&1; then if [ -z "${POD_NAME}" ]; then
echo "postgres pod ${POD_NAME} not found" >&2 echo "postgres pod not found" >&2
exit 1 exit 1
fi fi

4
services/comms/mas-db-ensure-rbac.yaml
View File

@ -16,11 +16,9 @@ rules:
verbs: ["get", "create", "patch", "update"] verbs: ["get", "create", "patch", "update"]
- apiGroups: [""] - apiGroups: [""]
resources: ["pods"] resources: ["pods"]
resourceNames: ["postgres-0"] verbs: ["get", "list"]
verbs: ["get"]
- apiGroups: [""] - apiGroups: [""]
resources: ["pods/exec"] resources: ["pods/exec"]
resourceNames: ["postgres-0"]
verbs: ["create"] verbs: ["create"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1