mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-20 23:16:49 +00:00
Scooby HuskyandClaude Opus 4.6
263dd3f6cc
The :1.31 tag is gone from Docker Hub and :latest is blocked by Kyverno disallow-latest-tag policy. The 1.29 image is cached on cluster nodes. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
37 lines
1.2 KiB
YAML
37 lines
1.2 KiB
YAML
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: authentik-oauth-sync
|
|
namespace: authentik
|
|
annotations:
|
|
argocd.argoproj.io/hook: PostSync
|
|
argocd.argoproj.io/hook-delete-policy: BeforeHookCreation
|
|
argocd.argoproj.io/sync-wave: "1"
|
|
spec:
|
|
backoffLimit: 3
|
|
template:
|
|
spec:
|
|
serviceAccountName: argocd-hook-sa
|
|
containers:
|
|
- name: oauth-sync
|
|
image: bitnami/kubectl:1.29
|
|
command:
|
|
- /bin/bash
|
|
- -c
|
|
- |
|
|
set -euo pipefail
|
|
echo "=== Authentik PostSync - OAuth Sync ==="
|
|
|
|
echo "Waiting for Authentik server..."
|
|
kubectl -n authentik rollout status deploy/authentik-server --timeout=600s
|
|
|
|
echo "Waiting for Authentik worker..."
|
|
kubectl -n authentik rollout status deploy/authentik-worker --timeout=300s
|
|
|
|
echo "OAuth sync scripts should be run manually or via a separate automation."
|
|
echo "Scripts are in the scripts/ directory of the Homelabv4 repo."
|
|
echo "Run: bash scripts/sync-*-oauth.sh"
|
|
|
|
echo "=== Authentik PostSync Complete ==="
|
|
restartPolicy: Never
|