mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 11:36:50 +00:00
Scooby HuskyandClaude Opus 4.6
af573c647f
bitnami/kubectl has removed all version tags from Docker Hub, leaving only :latest which is blocked by Kyverno disallow-latest-tag policy. Switch to alpine/k8s:1.32.13 which has kubectl, bash, jq, and uses proper version tags. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
37 lines
1.2 KiB
YAML
37 lines
1.2 KiB
YAML
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: authentik-oauth-sync
|
|
namespace: authentik
|
|
annotations:
|
|
argocd.argoproj.io/hook: PostSync
|
|
argocd.argoproj.io/hook-delete-policy: BeforeHookCreation
|
|
argocd.argoproj.io/sync-wave: "1"
|
|
spec:
|
|
backoffLimit: 3
|
|
template:
|
|
spec:
|
|
serviceAccountName: argocd-hook-sa
|
|
containers:
|
|
- name: oauth-sync
|
|
image: alpine/k8s:1.32.13
|
|
command:
|
|
- /bin/bash
|
|
- -c
|
|
- |
|
|
set -euo pipefail
|
|
echo "=== Authentik PostSync - OAuth Sync ==="
|
|
|
|
echo "Waiting for Authentik server..."
|
|
kubectl -n authentik rollout status deploy/authentik-server --timeout=600s
|
|
|
|
echo "Waiting for Authentik worker..."
|
|
kubectl -n authentik rollout status deploy/authentik-worker --timeout=300s
|
|
|
|
echo "OAuth sync scripts should be run manually or via a separate automation."
|
|
echo "Scripts are in the scripts/ directory of the Homelabv4 repo."
|
|
echo "Run: bash scripts/sync-*-oauth.sh"
|
|
|
|
echo "=== Authentik PostSync Complete ==="
|
|
restartPolicy: Never
|