dbildungs-iam-server

dBildungsplattform · Nov 25, 2024 · a57c753 · a57c753
1 parent ef9879c
commit a57c753
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 12 deletions.
diff --git a/automation/dbildungs-iam-server/Chart.lock b/automation/dbildungs-iam-server/Chart.lock
@@ -3,4 +3,4 @@ dependencies:
   repository: https://charts.bitnami.com/bitnami
   version: 20.3.0
 digest: sha256:a42635c8459b26a7c01fd2cfeeba7cbb250bef345be41c70b8bfcd0025379057
-generated: "2024-11-25T15:49:38.887835206Z"
+generated: "2024-11-25T15:54:05.745668625Z"
diff --git a/automation/dbildungs-iam-server/Chart.yaml b/automation/dbildungs-iam-server/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: sha-43280d9
+appVersion: DBP-0000
 dependencies:
 - condition: redis.enabled
   name: redis
@@ -8,4 +8,4 @@ dependencies:
 description: dBildungs-IAM-server
 name: dbildungs-iam-server
 type: application
-version: 0.0.1-20241125-1549
+version: 0.0.0-dbp-0000-20241125-1554
diff --git a/automation/dbildungs-iam-server/templates/cronjob.yaml b/automation/dbildungs-iam-server/templates/cronjob.yaml
@@ -22,10 +22,9 @@ spec:
             image: "{{ $.Values.cronjobs.image.repository }}:{{ $.Values.cronjobs.image.tag }}"
             imagePullPolicy: {{ $.Values.cronjobs.image.pullPolicy | default "Always"}}
             securityContext:
-              # not yet possible since we need to install some tools
-              # privileged: false
-              # runAsUser: 1000
-              # runAsNonRoot: true
+              privileged: false
+              runAsUser: 1000
+              runAsNonRoot: true
               capabilities:
                 drop:
                   - ALL
@@ -52,9 +51,6 @@ spec:
               - "sh"
               - "-c"
               - |
-                  mkdir /scripts &&
-                  cp /scripts_tmp/*.sh /scripts/ &&
-                  chmod +x /scripts/*.sh &&
                   touch /var/log/cron.log &&
                   chmod 644 /var/log/cron.log &&
                   cd {{ $.Values.cronjobs.scriptDir }} &&
@@ -65,7 +61,8 @@ spec:
                 subPath: jwks.json
                 readOnly: true
               - name: script-volume
-                mountPath: /scripts_tmp
+                mountPath: /scripts
+                defaultMode: 0555
                 readOnly: false
             ports:
             - containerPort: {{ $.Values.cronjobs.port }}

diff --git a/automation/dbildungs-iam-server/values.yaml b/automation/dbildungs-iam-server/values.yaml
@@ -172,7 +172,7 @@ status:
 cronjobs:
   enabled: true
   image:
-    tag: DBP-1083-latest
+    tag: '1.1.0'
     repository: ghcr.io/hpi-schul-cloud/cron-tools
     pullPolicy: IfNotPresent
   port: 5656