# services/keycloak/portal-e2e-execute-actions-email-test-job.yaml
apiVersion: batch/v1
kind: Job
metadata:
  name: keycloak-portal-e2e-execute-actions-email-6
  namespace: sso
spec:
  backoffLimit: 3
  template:
    spec:
      restartPolicy: Never
      serviceAccountName: sso-vault
      containers:
        - name: test
          image: python:3.11-alpine
          env:
            - name: KEYCLOAK_SERVER
              value: http://keycloak.sso.svc.cluster.local
            - name: KEYCLOAK_REALM
              value: atlas
            - name: E2E_PROBE_USERNAME
              value: e2e-smtp-probe
            - name: E2E_PROBE_EMAIL
              value: robot@bstein.dev
            - name: EXECUTE_ACTIONS_CLIENT_ID
              value: bstein-dev-home
            - name: EXECUTE_ACTIONS_REDIRECT_URI
              value: https://bstein.dev/
          command: ["/bin/sh", "-c"]
          args:
            - |
              set -euo pipefail
              . /vault/scripts/keycloak_vault_env.sh
              python /scripts/test_keycloak_execute_actions_email.py
          volumeMounts:
            - name: tests
              mountPath: /scripts
              readOnly: true
            - name: vault-secrets
              mountPath: /vault/secrets
              readOnly: true
            - name: vault-scripts
              mountPath: /vault/scripts
              readOnly: true
      volumes:
        - name: tests
          configMap:
            name: portal-e2e-tests
            defaultMode: 0555
        - name: vault-secrets
          csi:
            driver: secrets-store.csi.k8s.io
            readOnly: true
            volumeAttributes:
              secretProviderClass: sso-vault
        - name: vault-scripts
          configMap:
            name: sso-vault-env
            defaultMode: 0555