bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feature/sso-hardening #9

Merged
bstein merged 685 commits from feature/sso-hardening into main 2026-01-13 20:23:26 +00:00
Conversation 0 Commits 685 Files Changed 325 +6 -4
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 6c99eb452e - Show all commits

10
services/keycloak/mas-secrets-ensure-job.yaml
View File

@ -8,14 +8,15 @@ metadata:
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: mas-secrets-ensure-4 name: mas-secrets-ensure-5
namespace: sso namespace: sso
spec: spec:
backoffLimit: 2 backoffLimit: 0
ttlSecondsAfterFinished: 3600
template: template:
spec: spec:
serviceAccountName: mas-secrets-ensure serviceAccountName: mas-secrets-ensure
restartPolicy: OnFailure restartPolicy: Never
volumes: volumes:
- name: work - name: work
emptyDir: {} emptyDir: {}
@ -95,7 +96,8 @@ spec:
--from-file=encryption=/work/encryption \ --from-file=encryption=/work/encryption \
--from-file=matrix_shared_secret=/work/matrix_shared_secret \ --from-file=matrix_shared_secret=/work/matrix_shared_secret \
--from-file=keycloak_client_secret=/work/keycloak_client_secret \ --from-file=keycloak_client_secret=/work/keycloak_client_secret \
--from-file=rsa_key=/work/rsa_key >/dev/null --from-file=rsa_key=/work/rsa_key \
--dry-run=client -o yaml | kubectl -n comms apply -f - >/dev/null
volumeMounts: volumeMounts:
- name: work - name: work
mountPath: /work mountPath: /work