From 5e21ceaad30ee8740f6653ffcea4eefc9bd494a1 Mon Sep 17 00:00:00 2001
From: Remy Moll <me@moll.re>
Date: Sat, 10 Feb 2024 18:58:20 +0100
Subject: [PATCH] lets try this

---
 apps/recipes/deployment.yaml           | 43 --------------------------
 apps/recipes/recipes.sealedsecret.yaml |  2 +-
 2 files changed, 1 insertion(+), 44 deletions(-)

diff --git a/apps/recipes/deployment.yaml b/apps/recipes/deployment.yaml
index 831d598..d6be590 100644
--- a/apps/recipes/deployment.yaml
+++ b/apps/recipes/deployment.yaml
@@ -18,47 +18,6 @@ spec:
     spec:
       restartPolicy: Always
       initContainers:
-      - name: init-chmod-data
-        env:
-          - name: SECRET_KEY
-            valueFrom:
-              secretKeyRef:
-                name: recipes
-                key: secret-key
-          - name: DB_ENGINE
-            value: django.db.backends.sqlite3
-        image: recipes
-        imagePullPolicy: Always
-        resources:
-          requests:
-            cpu: 250m
-            memory: 64Mi
-        command:
-        - sh
-        - -c
-        - |
-          set -e
-          source venv/bin/activate
-          echo "Updating database"
-          python manage.py migrate
-          python manage.py collectstatic_js_reverse
-          python manage.py collectstatic --noinput
-          echo "Setting media file attributes"
-          chown -R 65534:65534 /opt/recipes/mediafiles
-          find /opt/recipes/mediafiles -type d | xargs -r chmod 755
-          find /opt/recipes/mediafiles -type f | xargs -r chmod 644
-          echo "Done"
-        securityContext:
-          runAsUser: 0
-        volumeMounts:
-        - mountPath: /opt/recipes/mediafiles
-          name: media
-          # mount as subPath due to lost+found on ext4 pvc
-          subPath: files
-        - mountPath: /opt/recipes/staticfiles
-          name: static
-          # mount as subPath due to lost+found on ext4 pvc
-          subPath: files
       containers:
       - name: recipes-nginx
         image: nginx:latest
@@ -141,8 +100,6 @@ spec:
             value: "0"
           - name: DB_ENGINE
             value: django.db.backends.sqlite3
-        securityContext:
-          runAsUser: 65534
       volumes:
         - name: media
           persistentVolumeClaim:
diff --git a/apps/recipes/recipes.sealedsecret.yaml b/apps/recipes/recipes.sealedsecret.yaml
index ced1d18..724068c 100644
--- a/apps/recipes/recipes.sealedsecret.yaml
+++ b/apps/recipes/recipes.sealedsecret.yaml
@@ -7,7 +7,7 @@ metadata:
   namespace: recipes
 spec:
   encryptedData:
-    secret-key: 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
+    secret-key: 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
   template:
     metadata:
       creationTimestamp: null