61 lines
1.8 KiB
YAML
61 lines
1.8 KiB
YAML
# services/keycloak/portal-e2e-token-exchange-test-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: keycloak-portal-e2e-token-exchange-test-2
|
|
namespace: sso
|
|
spec:
|
|
backoffLimit: 6
|
|
ttlSecondsAfterFinished: 3600
|
|
template:
|
|
spec:
|
|
restartPolicy: Never
|
|
serviceAccountName: sso-vault
|
|
containers:
|
|
- name: test
|
|
image: python:3.11-alpine
|
|
env:
|
|
- name: KEYCLOAK_SERVER
|
|
value: http://keycloak.sso.svc.cluster.local
|
|
- name: KEYCLOAK_REALM
|
|
value: atlas
|
|
- name: TARGET_CLIENT_ID
|
|
value: bstein-dev-home
|
|
- name: IMPERSONATE_USERNAME
|
|
value: robotuser
|
|
- name: RETRY_DEADLINE_SECONDS
|
|
value: "300"
|
|
- name: RETRY_INTERVAL_SECONDS
|
|
value: "5"
|
|
command: ["/bin/sh", "-c"]
|
|
args:
|
|
- |
|
|
set -euo pipefail
|
|
. /vault/scripts/keycloak_vault_env.sh
|
|
python /scripts/test_portal_token_exchange.py
|
|
volumeMounts:
|
|
- name: tests
|
|
mountPath: /scripts
|
|
readOnly: true
|
|
- name: vault-secrets
|
|
mountPath: /vault/secrets
|
|
readOnly: true
|
|
- name: vault-scripts
|
|
mountPath: /vault/scripts
|
|
readOnly: true
|
|
volumes:
|
|
- name: tests
|
|
configMap:
|
|
name: portal-e2e-tests
|
|
defaultMode: 0555
|
|
- name: vault-secrets
|
|
csi:
|
|
driver: secrets-store.csi.k8s.io
|
|
readOnly: true
|
|
volumeAttributes:
|
|
secretProviderClass: sso-vault
|
|
- name: vault-scripts
|
|
configMap:
|
|
name: sso-vault-env
|
|
defaultMode: 0555
|