bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feature/sso-hardening #9

Merged
bstein merged 685 commits from feature/sso-hardening into main 2026-01-13 20:23:26 +00:00
Conversation 0 Commits 685 Files Changed 325 +6 -5
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit e384a9e417 - Show all commits

11
services/comms/mas-db-ensure-job.yaml
View File

@ -2,7 +2,7 @@
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: mas-db-ensure-12 name: mas-db-ensure-13
namespace: comms namespace: comms
spec: spec:
backoffLimit: 1 backoffLimit: 1
@ -36,9 +36,10 @@ spec:
exit 1 exit 1
fi fi
kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres -v mas_pass="${MAS_PASS}" \ MAS_PASS_SQL="$(printf '%s' "${MAS_PASS}" | sed "s/'/''/g")"
-c "CREATE ROLE mas LOGIN PASSWORD :'mas_pass';" || true kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres -v mas_pass="${MAS_PASS}" \ -c "CREATE ROLE mas LOGIN PASSWORD '${MAS_PASS_SQL}';" || true
-c "ALTER ROLE mas WITH PASSWORD :'mas_pass';" kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
-c "ALTER ROLE mas WITH PASSWORD '${MAS_PASS_SQL}';"
kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \ kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
-c "CREATE DATABASE mas OWNER mas;" || true -c "CREATE DATABASE mas OWNER mas;" || true