migrate to new passmower

freescout/application.yml

@@ -1,6 +1,6 @@
 ---
-apiVersion: codemowers.io/v1alpha1
-kind: OIDCGWMiddlewareClient
+apiVersion: codemowers.cloud/v1beta1
+kind: OIDCMiddlewareClient
 metadata:
   name: freescout
 spec:
@@ -14,8 +14,8 @@ spec:
     name: Remote-Name
     user: Remote-User
 ---
-apiVersion: codemowers.io/v1alpha1
-kind: OIDCGWClient
+apiVersion: codemowers.cloud/v1beta1
+kind: OIDCClient
 metadata:
   name: freescout
 spec:
@@ -34,11 +34,77 @@ spec:
     - openid
     - profile
   pkce: false
+  secretRefreshPod:
+    apiVersion: v1
+    kind: Pod
+    spec:
+      volumes:
+        - name: tmp
+          emptyDir: {}
+      initContainers:
+        - name: jq
+          image: >-
+            alpine/k8s:1.24.16@sha256:06f8942d87fa17b40795bb9a8eff029a9be3fc3c9bcc13d62071de4cc3324153
+          command:
+            - /bin/bash
+            - '-c'
+            - >-
+              rm -fv /tmp/update.sql; jq
+              '{"name":"oauth.client_id","value":$ENV.OIDC_CLIENT_ID} | "UPDATE
+              options SET value=\(.value|tostring|@sh) WHERE
+              name=\(.name|tostring|@sh) LIMIT 1;"' -n -r >> /tmp/update.sql; jq
+              '{"name":"oauth.client_secret","value":$ENV.OIDC_CLIENT_SECRET} |
+              "UPDATE options SET value=\(.value|tostring|@sh) WHERE
+              name=\(.name|tostring|@sh) LIMIT 1;"' -n -r >> /tmp/update.sql; jq
+              '{"name":"oauth.auth_url","value":$ENV.OIDC_IDP_AUTH_URI} |
+              "UPDATE options SET value=\(.value + "?scope=openid+profile"
+              |tostring|@sh) WHERE name=\(.name|tostring|@sh) LIMIT 1;"' -n -r
+              >> /tmp/update.sql; jq
+              '{"name":"oauth.token_url","value":$ENV.OIDC_IDP_TOKEN_URI} |
+              "UPDATE options SET value=\(.value|tostring|@sh) WHERE
+              name=\(.name|tostring|@sh) LIMIT 1;"' -n -r >> /tmp/update.sql; jq
+              '{"name":"oauth.user_url","value":$ENV.OIDC_IDP_USERINFO_URI}
+              | "UPDATE options SET value=\(.value|tostring|@sh) WHERE
+              name=\(.name|tostring|@sh) LIMIT 1;"' -n -r >> /tmp/update.sql;
+              cat /tmp/update.sql
+          envFrom:
+            - secretRef:
+                name: oidc-client-freescout-owner-secrets
+          resources: {}
+          volumeMounts:
+            - name: tmp
+              mountPath: /tmp
+          terminationMessagePath: /dev/termination-log
+          terminationMessagePolicy: File
+          imagePullPolicy: IfNotPresent
+      containers:
+        - name: mysql
+          image: mysql
+          command:
+            - /bin/bash
+            - '-c'
+            - >-
+              mysql -u kspace_freescout kspace_freescout -h 172.20.36.1
+              -p${MYSQL_PWD} < /tmp/update.sql
+          env:
+            - name: MYSQL_PWD
+              valueFrom:
+                secretKeyRef:
+                  name: freescout-secrets
+                  key: DB_PASS
+          resources: {}
+          volumeMounts:
+            - name: tmp
+              mountPath: /tmp
+          terminationMessagePath: /dev/termination-log
+          terminationMessagePolicy: File
+          imagePullPolicy: IfNotPresent
+      restartPolicy: OnFailure
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: oidc-gateway
+  name: freescout
   annotations:
     kubernetes.io/ingress.class: traefik
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
@@ -92,7 +158,7 @@ spec:
     spec:
       containers:
         - name: freescout
-          image: harbor.k-space.ee/k-space/freescout@sha256:de1a6c8bd1f285f6f6c61aa48921a884fe7a1496655b31c9536805397c01ee58
+          image: harbor.k-space.ee/k-space/freescout
           ports:
             - containerPort: 8080
           env:
@@ -153,7 +219,7 @@ spec:
         spec:
           containers:
             - name: freescout-cron
-              image: harbor.k-space.ee/k-space/freescout@sha256:de1a6c8bd1f285f6f6c61aa48921a884fe7a1496655b31c9536805397c01ee58
+              image: harbor.k-space.ee/k-space/freescout
               imagePullPolicy: Always
               command:
                 - php