# services/keycloak/portal-e2e-token-exchange-test-job.yaml
apiVersion: batch/v1
kind: Job
metadata:
  name: keycloak-portal-e2e-token-exchange-test-1
  namespace: sso
spec:
  backoffLimit: 6
  ttlSecondsAfterFinished: 3600
  template:
    spec:
      restartPolicy: Never
      containers:
        - name: test
          image: python:3.11-alpine
          env:
            - name: KEYCLOAK_SERVER
              value: http://keycloak.sso.svc.cluster.local
            - name: KEYCLOAK_REALM
              value: atlas
            - name: TARGET_CLIENT_ID
              value: bstein-dev-home
            - name: IMPERSONATE_USERNAME
              value: robotuser
            - name: RETRY_DEADLINE_SECONDS
              value: "300"
            - name: RETRY_INTERVAL_SECONDS
              value: "5"
            - name: PORTAL_E2E_CLIENT_ID
              valueFrom:
                secretKeyRef:
                  name: portal-e2e-client
                  key: client_id
            - name: PORTAL_E2E_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: portal-e2e-client
                  key: client_secret
          command: ["/bin/sh", "-c"]
          args:
            - |
              set -euo pipefail
              python /scripts/test_portal_token_exchange.py
          volumeMounts:
            - name: tests
              mountPath: /scripts
              readOnly: true
      volumes:
        - name: tests
          configMap:
            name: portal-e2e-tests
            defaultMode: 0555