From dab590aeb87442a9fe1a7a6e64030b17317ffa33 Mon Sep 17 00:00:00 2001 From: Jonas Juselius Date: Fri, 20 Jun 2025 14:13:04 +0200 Subject: [PATCH] fix: disable redis sso sync --- .../manifests/redis-sso-sync-cronjob.yaml | 122 +++++++++--------- 1 file changed, 61 insertions(+), 61 deletions(-) diff --git a/values/redis/manifests/redis-sso-sync-cronjob.yaml b/values/redis/manifests/redis-sso-sync-cronjob.yaml index 3b327a82..13c61317 100644 --- a/values/redis/manifests/redis-sso-sync-cronjob.yaml +++ b/values/redis/manifests/redis-sso-sync-cronjob.yaml @@ -1,63 +1,63 @@ -apiVersion: batch/v1 -kind: CronJob -metadata: - name: sync-dataprotection-keys - namespace: redis -spec: - schedule: "0 12 14 * *" # at noon the 14th of every month - jobTemplate: - spec: - template: - spec: - containers: - - name: sync - image: redis - command: [ "/bin/sh", "/script/sync.sh" ] - env: - - name: PROD_REDIS_PASSWORD - valueFrom: - secretKeyRef: - name: prod-redis - key: redis-password - - name: STAGING_REDIS_PASSWORD - valueFrom: - secretKeyRef: - name: staging-redis - key: redis-password - volumeMounts: - - name: script - mountPath: /script - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: false - runAsGroup: 0 - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - securityContext: - fsGroup: 1001 - fsGroupChangePolicy: Always - volumes: - - name: script - configMap: - name: sync-dataprotection-keys-script - defaultMode: 0500 - restartPolicy: Never - backoffLimit: 4 ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: sync-dataprotection-keys-script - namespace: redis -data: - sync.sh: |- - #!/bin/sh - redis-cli -h prod-redis-master -a $PROD_REDIS_PASSWORD -D "" --raw dump DataProtection-Keys |\ - redis-cli -h staging-redis-master -a $STAGING_REDIS_PASSWORD -X keys restore DataProtection-Keys 0 keys replace +#apiVersion: batch/v1 +#kind: CronJob +#metadata: +# name: sync-dataprotection-keys +# namespace: redis +#spec: +# schedule: "0 12 14 * *" # at noon the 14th of every month +# jobTemplate: +# spec: +# template: +# spec: +# containers: +# - name: sync +# image: redis +# command: [ "/bin/sh", "/script/sync.sh" ] +# env: +# - name: PROD_REDIS_PASSWORD +# valueFrom: +# secretKeyRef: +# name: prod-redis +# key: redis-password +# - name: STAGING_REDIS_PASSWORD +# valueFrom: +# secretKeyRef: +# name: staging-redis +# key: redis-password +# volumeMounts: +# - name: script +# mountPath: /script +# securityContext: +# allowPrivilegeEscalation: false +# capabilities: +# drop: +# - ALL +# readOnlyRootFilesystem: false +# runAsGroup: 0 +# runAsNonRoot: true +# runAsUser: 1001 +# seccompProfile: +# type: RuntimeDefault +# securityContext: +# fsGroup: 1001 +# fsGroupChangePolicy: Always +# volumes: +# - name: script +# configMap: +# name: sync-dataprotection-keys-script +# defaultMode: 0500 +# restartPolicy: Never +# backoffLimit: 4 +#--- +#apiVersion: v1 +#kind: ConfigMap +#metadata: +# name: sync-dataprotection-keys-script +# namespace: redis +#data: +# sync.sh: |- +# #!/bin/sh +# redis-cli -h prod-redis-master -a $PROD_REDIS_PASSWORD -D "" --raw dump DataProtection-Keys |\ +# redis-cli -h staging-redis-master -a $STAGING_REDIS_PASSWORD -X keys restore DataProtection-Keys 0 keys replace