titan-iac/services/keycloak/portal-e2e-execute-actions-email-test-job.yaml

60 lines
1.8 KiB
YAML

# services/keycloak/portal-e2e-execute-actions-email-test-job.yaml
apiVersion: batch/v1
kind: Job
metadata:
name: keycloak-portal-e2e-execute-actions-email-6
namespace: sso
spec:
backoffLimit: 3
template:
spec:
restartPolicy: Never
serviceAccountName: sso-vault
containers:
- name: test
image: python:3.11-alpine
env:
- name: KEYCLOAK_SERVER
value: http://keycloak.sso.svc.cluster.local
- name: KEYCLOAK_REALM
value: atlas
- name: E2E_PROBE_USERNAME
value: e2e-smtp-probe
- name: E2E_PROBE_EMAIL
value: robot@bstein.dev
- name: EXECUTE_ACTIONS_CLIENT_ID
value: bstein-dev-home
- name: EXECUTE_ACTIONS_REDIRECT_URI
value: https://bstein.dev/
command: ["/bin/sh", "-c"]
args:
- |
set -euo pipefail
. /vault/scripts/keycloak_vault_env.sh
python /scripts/test_keycloak_execute_actions_email.py
volumeMounts:
- name: tests
mountPath: /scripts
readOnly: true
- name: vault-secrets
mountPath: /vault/secrets
readOnly: true
- name: vault-scripts
mountPath: /vault/scripts
readOnly: true
volumes:
- name: tests
configMap:
name: portal-e2e-tests
defaultMode: 0555
- name: vault-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: sso-vault
- name: vault-scripts
configMap:
name: sso-vault-env
defaultMode: 0555