bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feature/sso-hardening #9

Merged
bstein merged 685 commits from feature/sso-hardening into main 2026-01-13 20:23:26 +00:00
Conversation 0 Commits 685 Files Changed 325 +6 -5
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit e384a9e417 - Show all commits

11
services/comms/mas-db-ensure-job.yaml
View File

@ -2,7 +2,7 @@
apiVersion: batch/v1
kind: Job
metadata:
name: mas-db-ensure-12
name: mas-db-ensure-13
namespace: comms
spec:
backoffLimit: 1
@ -36,9 +36,10 @@ spec:
exit 1
fi
kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres -v mas_pass="${MAS_PASS}" \
-c "CREATE ROLE mas LOGIN PASSWORD :'mas_pass';" || true
kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres -v mas_pass="${MAS_PASS}" \
-c "ALTER ROLE mas WITH PASSWORD :'mas_pass';"
MAS_PASS_SQL="$(printf '%s' "${MAS_PASS}" | sed "s/'/''/g")"
kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
-c "CREATE ROLE mas LOGIN PASSWORD '${MAS_PASS_SQL}';" || true
kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
-c "ALTER ROLE mas WITH PASSWORD '${MAS_PASS_SQL}';"
kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
-c "CREATE DATABASE mas OWNER mas;" || true