diff --git a/automation/dbildungs-iam-server/Chart.lock b/automation/dbildungs-iam-server/Chart.lock index ee9cdf702..1ebc54fa9 100644 --- a/automation/dbildungs-iam-server/Chart.lock +++ b/automation/dbildungs-iam-server/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://charts.bitnami.com/bitnami version: 20.3.0 digest: sha256:a42635c8459b26a7c01fd2cfeeba7cbb250bef345be41c70b8bfcd0025379057 -generated: "2024-11-25T15:54:05.745668625Z" +generated: "2024-11-25T16:12:20.270642604Z" diff --git a/automation/dbildungs-iam-server/Chart.yaml b/automation/dbildungs-iam-server/Chart.yaml index 63ed56bef..04e7cb217 100644 --- a/automation/dbildungs-iam-server/Chart.yaml +++ b/automation/dbildungs-iam-server/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: DBP-0000 +appVersion: 0.9.1 dependencies: - condition: redis.enabled name: redis @@ -8,4 +8,4 @@ dependencies: description: dBildungs-IAM-server name: dbildungs-iam-server type: application -version: 0.0.0-dbp-0000-20241125-1554 +version: 0.9.1 diff --git a/automation/dbildungs-iam-server/templates/cronjob.yaml b/automation/dbildungs-iam-server/templates/cronjob.yaml index fbba28fe9..b2b72b23f 100644 --- a/automation/dbildungs-iam-server/templates/cronjob.yaml +++ b/automation/dbildungs-iam-server/templates/cronjob.yaml @@ -22,9 +22,10 @@ spec: image: "{{ $.Values.cronjobs.image.repository }}:{{ $.Values.cronjobs.image.tag }}" imagePullPolicy: {{ $.Values.cronjobs.image.pullPolicy | default "Always"}} securityContext: - privileged: false - runAsUser: 1000 - runAsNonRoot: true + # not yet possible since we need to install some tools + # privileged: false + # runAsUser: 1000 + # runAsNonRoot: true capabilities: drop: - ALL @@ -51,6 +52,9 @@ spec: - "sh" - "-c" - | + mkdir /scripts && + cp /scripts_tmp/*.sh /scripts/ && + chmod +x /scripts/*.sh && touch /var/log/cron.log && chmod 644 /var/log/cron.log && cd {{ $.Values.cronjobs.scriptDir }} && @@ -61,8 +65,7 @@ spec: subPath: jwks.json readOnly: true - name: script-volume - mountPath: /scripts - defaultMode: 0555 + mountPath: /scripts_tmp readOnly: false ports: - containerPort: {{ $.Values.cronjobs.port }} diff --git a/automation/dbildungs-iam-server/values.yaml b/automation/dbildungs-iam-server/values.yaml index 4d595ba17..9ef83effd 100644 --- a/automation/dbildungs-iam-server/values.yaml +++ b/automation/dbildungs-iam-server/values.yaml @@ -172,7 +172,7 @@ status: cronjobs: enabled: true image: - tag: '1.1.0' + tag: DBP-1083-latest repository: ghcr.io/hpi-schul-cloud/cron-tools pullPolicy: IfNotPresent port: 5656