From d56aae135dfece2bbdebda225f0c89a21cfb03b5 Mon Sep 17 00:00:00 2001 From: OG T Date: Mon, 6 Apr 2026 14:48:45 +0800 Subject: [PATCH] =?UTF-8?q?fix(k8s):=20repair-known-hosts=20secret=20optio?= =?UTF-8?q?nal:true=20=E2=80=94=20Pod=20=E4=B8=8D=E9=98=BB=E5=A1=9E?= =?UTF-8?q?=E7=AD=89=E5=BE=85=20secret=20=E5=BB=BA=E7=AB=8B?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit CD 首次跑時才建立 secret，optional 讓 Pod 先起來 等 CD 建立 secret 後自動掛載 Co-Authored-By: Claude Sonnet 4.6 --- k8s/awoooi-prod/06-deployment-api.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/k8s/awoooi-prod/06-deployment-api.yaml b/k8s/awoooi-prod/06-deployment-api.yaml index 581fd52b..017d2bfb 100644 --- a/k8s/awoooi-prod/06-deployment-api.yaml +++ b/k8s/awoooi-prod/06-deployment-api.yaml @@ -109,9 +109,11 @@ spec: secretName: awoooi-repair-ssh-key defaultMode: 0400 # 八進位 0400 = 十進位 256 = r-------- (owner read-only) # 2026-04-06 Claude Code: Sprint 3 Security Fix A1 + # optional: true — CD 首次跑時建立 secret，Pod 不阻塞等待 - name: repair-known-hosts secret: secretName: awoooi-repair-known-hosts + optional: true --- apiVersion: v1