From e637550bb7355f024929041689c5e06b0199802a Mon Sep 17 00:00:00 2001 From: platform-engineer Date: Mon, 13 Jul 2026 13:53:58 +0000 Subject: [PATCH] fix(myorg-assistant): inject WEB_SECRET_KEY into all cronjobs CronJob containers import src.config.Settings() at startup, which requires WEB_SECRET_KEY. Only the Deployment set it; the 5 CronJobs (git-sync, morning-briefing, evening-summary, waiting-followup, deadline-checker) crashed at import with a pydantic ValidationError, causing restart loops (e.g. myorg-git-sync ~5 restarts/15m). Pull WEB_SECRET_KEY from the existing myorg-assistant-secret so the cronjobs start cleanly. --- myorg-assistant/cronjobs/deadline-checker.yaml | 5 +++++ myorg-assistant/cronjobs/evening-summary.yaml | 5 +++++ myorg-assistant/cronjobs/git-sync.yaml | 5 +++++ myorg-assistant/cronjobs/morning-briefing.yaml | 5 +++++ myorg-assistant/cronjobs/waiting-followup.yaml | 5 +++++ 5 files changed, 25 insertions(+) diff --git a/myorg-assistant/cronjobs/deadline-checker.yaml b/myorg-assistant/cronjobs/deadline-checker.yaml index 2de9e0a..7cc622c 100644 --- a/myorg-assistant/cronjobs/deadline-checker.yaml +++ b/myorg-assistant/cronjobs/deadline-checker.yaml @@ -54,6 +54,11 @@ spec: secretKeyRef: name: myorg-assistant-secret key: LITELLM_API_KEY + - name: WEB_SECRET_KEY + valueFrom: + secretKeyRef: + name: myorg-assistant-secret + key: WEB_SECRET_KEY volumeMounts: - name: myorg-data mountPath: /data/myorg diff --git a/myorg-assistant/cronjobs/evening-summary.yaml b/myorg-assistant/cronjobs/evening-summary.yaml index 1a43eae..cf7c1fb 100644 --- a/myorg-assistant/cronjobs/evening-summary.yaml +++ b/myorg-assistant/cronjobs/evening-summary.yaml @@ -54,6 +54,11 @@ spec: secretKeyRef: name: myorg-assistant-secret key: LITELLM_API_KEY + - name: WEB_SECRET_KEY + valueFrom: + secretKeyRef: + name: myorg-assistant-secret + key: WEB_SECRET_KEY volumeMounts: - name: myorg-data mountPath: /data/myorg diff --git a/myorg-assistant/cronjobs/git-sync.yaml b/myorg-assistant/cronjobs/git-sync.yaml index ae609c7..c4d4dba 100644 --- a/myorg-assistant/cronjobs/git-sync.yaml +++ b/myorg-assistant/cronjobs/git-sync.yaml @@ -69,6 +69,11 @@ spec: secretKeyRef: name: myorg-assistant-secret key: LITELLM_API_KEY + - name: WEB_SECRET_KEY + valueFrom: + secretKeyRef: + name: myorg-assistant-secret + key: WEB_SECRET_KEY volumeMounts: - name: myorg-data mountPath: /data/myorg diff --git a/myorg-assistant/cronjobs/morning-briefing.yaml b/myorg-assistant/cronjobs/morning-briefing.yaml index 517a1db..24b5e2b 100644 --- a/myorg-assistant/cronjobs/morning-briefing.yaml +++ b/myorg-assistant/cronjobs/morning-briefing.yaml @@ -61,6 +61,11 @@ spec: secretKeyRef: name: myorg-assistant-secret key: LITELLM_API_KEY + - name: WEB_SECRET_KEY + valueFrom: + secretKeyRef: + name: myorg-assistant-secret + key: WEB_SECRET_KEY volumeMounts: - name: myorg-data mountPath: /data/myorg diff --git a/myorg-assistant/cronjobs/waiting-followup.yaml b/myorg-assistant/cronjobs/waiting-followup.yaml index c3fde1e..5470371 100644 --- a/myorg-assistant/cronjobs/waiting-followup.yaml +++ b/myorg-assistant/cronjobs/waiting-followup.yaml @@ -54,6 +54,11 @@ spec: secretKeyRef: name: myorg-assistant-secret key: LITELLM_API_KEY + - name: WEB_SECRET_KEY + valueFrom: + secretKeyRef: + name: myorg-assistant-secret + key: WEB_SECRET_KEY volumeMounts: - name: myorg-data mountPath: /data/myorg -- 2.49.1