bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feature/sso-hardening #9

Merged
bstein merged 685 commits from feature/sso-hardening into main 2026-01-13 20:23:26 +00:00
Conversation 0 Commits 685 Files Changed 325 +4 -3
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 8950306c53 - Show all commits

7
services/comms/mas-db-ensure-job.yaml
View File

@ -2,15 +2,15 @@
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: mas-db-ensure-8 name: mas-db-ensure-9
namespace: comms namespace: comms
spec: spec:
backoffLimit: 0 backoffLimit: 1
ttlSecondsAfterFinished: 600 ttlSecondsAfterFinished: 600
template: template:
spec: spec:
serviceAccountName: mas-db-ensure serviceAccountName: mas-db-ensure
restartPolicy: OnFailure restartPolicy: Never
containers: containers:
- name: ensure - name: ensure
image: bitnami/kubectl:latest image: bitnami/kubectl:latest
@ -18,6 +18,7 @@ spec:
args: args:
- | - |
set -eu set -eu
trap 'echo "mas-db-ensure failed"; sleep 300' ERR
umask 077 umask 077
if kubectl -n comms get secret mas-db >/dev/null 2>&1; then if kubectl -n comms get secret mas-db >/dev/null 2>&1; then
MAS_PASS="$(kubectl -n comms get secret mas-db -o jsonpath='{.data.password}' | base64 -d)" MAS_PASS="$(kubectl -n comms get secret mas-db -o jsonpath='{.data.password}' | base64 -d)"