dbildungs-iam-server

dBildungsplattform · Nov 25, 2024 · 3e27fb6 · 3e27fb6
1 parent a4ee8ca
commit 3e27fb6
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 9 deletions.
diff --git a/automation/dbildungs-iam-server/Chart.lock b/automation/dbildungs-iam-server/Chart.lock
@@ -3,4 +3,4 @@ dependencies:
   repository: https://charts.bitnami.com/bitnami
   version: 20.3.0
 digest: sha256:a42635c8459b26a7c01fd2cfeeba7cbb250bef345be41c70b8bfcd0025379057
-generated: "2024-11-25T15:29:42.737493643Z"
+generated: "2024-11-25T15:34:02.122241138Z"
diff --git a/automation/dbildungs-iam-server/Chart.yaml b/automation/dbildungs-iam-server/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: DBP-0000
+appVersion: SPSH-1423
 dependencies:
 - condition: redis.enabled
   name: redis
@@ -8,4 +8,4 @@ dependencies:
 description: dBildungs-IAM-server
 name: dbildungs-iam-server
 type: application
-version: 0.0.0-dbp-0000-20241125-1529
+version: 0.0.0-spsh-1423-20241125-1533
diff --git a/automation/dbildungs-iam-server/templates/cronjob.yaml b/automation/dbildungs-iam-server/templates/cronjob.yaml
@@ -22,9 +22,10 @@ spec:
             image: "{{ $.Values.cronjobs.image.repository }}:{{ $.Values.cronjobs.image.tag }}"
             imagePullPolicy: {{ $.Values.cronjobs.image.pullPolicy | default "Always"}}
             securityContext:
-              privileged: false
-              runAsUser: 1000
-              runAsNonRoot: true
+              # not yet possible since we need to install some tools
+              # privileged: false
+              # runAsUser: 1000
+              # runAsNonRoot: true
               capabilities:
                 drop:
                   - ALL
@@ -51,6 +52,9 @@ spec:
               - "sh"
               - "-c"
               - |
+                  mkdir /scripts &&
+                  cp /scripts_tmp/*.sh /scripts/ &&
+                  chmod +x /scripts/*.sh &&
                   touch /var/log/cron.log &&
                   chmod 644 /var/log/cron.log &&
                   cd {{ $.Values.cronjobs.scriptDir }} &&
@@ -61,8 +65,7 @@ spec:
                 subPath: jwks.json
                 readOnly: true
               - name: script-volume
-                mountPath: /scripts
-                defaultMode: 0555
+                mountPath: /scripts_tmp
                 readOnly: false
             ports:
             - containerPort: {{ $.Values.cronjobs.port }}

diff --git a/automation/dbildungs-iam-server/values.yaml b/automation/dbildungs-iam-server/values.yaml
@@ -172,7 +172,7 @@ status:
 cronjobs:
   enabled: true
   image:
-    tag: 1.1.0
+    tag: DBP-1083-latest
     repository: ghcr.io/hpi-schul-cloud/cron-tools
     pullPolicy: IfNotPresent
   port: 5656