fix: disable redis sso sync

This commit is contained in:
2025-06-20 14:13:04 +02:00
parent 2fccb6d966
commit dab590aeb8
@@ -1,63 +1,63 @@
apiVersion: batch/v1
kind: CronJob
metadata:
name: sync-dataprotection-keys
namespace: redis
spec:
schedule: "0 12 14 * *" # at noon the 14th of every month
jobTemplate:
spec:
template:
spec:
containers:
- name: sync
image: redis
command: [ "/bin/sh", "/script/sync.sh" ]
env:
- name: PROD_REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: prod-redis
key: redis-password
- name: STAGING_REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: staging-redis
key: redis-password
volumeMounts:
- name: script
mountPath: /script
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 0
runAsNonRoot: true
runAsUser: 1001
seccompProfile:
type: RuntimeDefault
securityContext:
fsGroup: 1001
fsGroupChangePolicy: Always
volumes:
- name: script
configMap:
name: sync-dataprotection-keys-script
defaultMode: 0500
restartPolicy: Never
backoffLimit: 4
---
apiVersion: v1
kind: ConfigMap
metadata:
name: sync-dataprotection-keys-script
namespace: redis
data:
sync.sh: |-
#!/bin/sh
redis-cli -h prod-redis-master -a $PROD_REDIS_PASSWORD -D "" --raw dump DataProtection-Keys |\
redis-cli -h staging-redis-master -a $STAGING_REDIS_PASSWORD -X keys restore DataProtection-Keys 0 keys replace
#apiVersion: batch/v1
#kind: CronJob
#metadata:
# name: sync-dataprotection-keys
# namespace: redis
#spec:
# schedule: "0 12 14 * *" # at noon the 14th of every month
# jobTemplate:
# spec:
# template:
# spec:
# containers:
# - name: sync
# image: redis
# command: [ "/bin/sh", "/script/sync.sh" ]
# env:
# - name: PROD_REDIS_PASSWORD
# valueFrom:
# secretKeyRef:
# name: prod-redis
# key: redis-password
# - name: STAGING_REDIS_PASSWORD
# valueFrom:
# secretKeyRef:
# name: staging-redis
# key: redis-password
# volumeMounts:
# - name: script
# mountPath: /script
# securityContext:
# allowPrivilegeEscalation: false
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: false
# runAsGroup: 0
# runAsNonRoot: true
# runAsUser: 1001
# seccompProfile:
# type: RuntimeDefault
# securityContext:
# fsGroup: 1001
# fsGroupChangePolicy: Always
# volumes:
# - name: script
# configMap:
# name: sync-dataprotection-keys-script
# defaultMode: 0500
# restartPolicy: Never
# backoffLimit: 4
#---
#apiVersion: v1
#kind: ConfigMap
#metadata:
# name: sync-dataprotection-keys-script
# namespace: redis
#data:
# sync.sh: |-
# #!/bin/sh
# redis-cli -h prod-redis-master -a $PROD_REDIS_PASSWORD -D "" --raw dump DataProtection-Keys |\
# redis-cli -h staging-redis-master -a $STAGING_REDIS_PASSWORD -X keys restore DataProtection-Keys 0 keys replace