fix(myorg-assistant): add WEB_SECRET_KEY env to cronjobs to stop pydantic Settings validation crash

fix(myorg-assistant): point cronjobs at registry image + add imagePullSecrets
CronJob pods were stuck in ImagePullBackOff because they referenced the local-only image 'myorg-assistant:latest' which is not present on the node. Switch all 5 cronjobs to the Gitea registry image git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf (matching the Deployment), set imagePullPolicy: Always, and add imagePullSecrets: gitea-registry so they can authenticate to the private registry.
2026-07-11 23:51:39 +00:00 · 2026-07-06 12:39:51 +00:00 · 2026-07-06 12:01:36 +00:00
6 changed files with 31 additions and 0 deletions
--- a/argocd-bootstrap.yaml
+++ b/argocd-bootstrap.yaml
@@ -22,3 +22,9 @@ spec:
      selfHeal: true
    syncOptions:
      - CreateNamespace=false
+  ignoreDifferences:
+    - group: argoproj.io
+      kind: Application
+      jsonPointers:
+        - /status
+        - /operation
--- a/myorg-assistant/cronjobs/deadline-checker.yaml
+++ b/myorg-assistant/cronjobs/deadline-checker.yaml
@@ -53,6 +53,11 @@ spec:
                secretKeyRef:
                  name: myorg-assistant-secret
                  key: LITELLM_API_KEY
+            - name: WEB_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: myorg-assistant-secret
+                  key: WEB_SECRET_KEY
            volumeMounts:
            - name: myorg-data
              mountPath: /data/myorg
--- a/myorg-assistant/cronjobs/evening-summary.yaml
+++ b/myorg-assistant/cronjobs/evening-summary.yaml
@@ -53,6 +53,11 @@ spec:
                secretKeyRef:
                  name: myorg-assistant-secret
                  key: LITELLM_API_KEY
+            - name: WEB_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: myorg-assistant-secret
+                  key: WEB_SECRET_KEY
            volumeMounts:
            - name: myorg-data
              mountPath: /data/myorg
--- a/myorg-assistant/cronjobs/git-sync.yaml
+++ b/myorg-assistant/cronjobs/git-sync.yaml
@@ -68,6 +68,11 @@ spec:
                secretKeyRef:
                  name: myorg-assistant-secret
                  key: LITELLM_API_KEY
+            - name: WEB_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: myorg-assistant-secret
+                  key: WEB_SECRET_KEY
            volumeMounts:
            - name: myorg-data
              mountPath: /data/myorg
--- a/myorg-assistant/cronjobs/morning-briefing.yaml
+++ b/myorg-assistant/cronjobs/morning-briefing.yaml
@@ -60,6 +60,11 @@ spec:
                secretKeyRef:
                  name: myorg-assistant-secret
                  key: LITELLM_API_KEY
+            - name: WEB_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: myorg-assistant-secret
+                  key: WEB_SECRET_KEY
            volumeMounts:
            - name: myorg-data
              mountPath: /data/myorg
--- a/myorg-assistant/cronjobs/waiting-followup.yaml
+++ b/myorg-assistant/cronjobs/waiting-followup.yaml
@@ -53,6 +53,11 @@ spec:
                secretKeyRef:
                  name: myorg-assistant-secret
                  key: LITELLM_API_KEY
+            - name: WEB_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: myorg-assistant-secret
+                  key: WEB_SECRET_KEY
            volumeMounts:
            - name: myorg-data
              mountPath: /data/myorg