titan-iac/services/keycloak/portal-e2e-token-exchange-test-job.yaml

53 lines
1.5 KiB
YAML

# services/keycloak/portal-e2e-token-exchange-test-job.yaml
apiVersion: batch/v1
kind: Job
metadata:
name: keycloak-portal-e2e-token-exchange-test-1
namespace: sso
spec:
backoffLimit: 6
ttlSecondsAfterFinished: 3600
template:
spec:
restartPolicy: Never
containers:
- name: test
image: python:3.11-alpine
env:
- name: KEYCLOAK_SERVER
value: http://keycloak.sso.svc.cluster.local
- name: KEYCLOAK_REALM
value: atlas
- name: TARGET_CLIENT_ID
value: bstein-dev-home
- name: IMPERSONATE_USERNAME
value: robotuser
- name: RETRY_DEADLINE_SECONDS
value: "300"
- name: RETRY_INTERVAL_SECONDS
value: "5"
- name: PORTAL_E2E_CLIENT_ID
valueFrom:
secretKeyRef:
name: portal-e2e-client
key: client_id
- name: PORTAL_E2E_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: portal-e2e-client
key: client_secret
command: ["/bin/sh", "-c"]
args:
- |
set -euo pipefail
python /scripts/test_portal_token_exchange.py
volumeMounts:
- name: tests
mountPath: /scripts
readOnly: true
volumes:
- name: tests
configMap:
name: portal-e2e-tests
defaultMode: 0555