forked from roger/k3s-cluster
CronJob containers import src.config.Settings() at startup, which requires WEB_SECRET_KEY. Only the Deployment set it; the 5 CronJobs (git-sync, morning-briefing, evening-summary, waiting-followup, deadline-checker) crashed at import with a pydantic ValidationError, causing restart loops (e.g. myorg-git-sync ~5 restarts/15m). Pull WEB_SECRET_KEY from the existing myorg-assistant-secret so the cronjobs start cleanly.