Janis cfb25eff8c fix(official-bots): mount JWT public key from ncs-jwt-keys ...

The official-bots rollout never mounted the ncs-jwt-keys secret nor set
JWT_PUBLIC_KEY_PATH, so the service fell back to the image-baked
public.pem, which does not match the deployed signing key. Every token
failed RS256 verification -> 401.

Mount ncs-jwt-keys at /secrets/jwt and point JWT_PUBLIC_KEY_PATH there,
mirroring account/core/tournament. Verify-only, no private key.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-17 09:42:21 +02:00

..

argo_all_k8s_kustomize_schema.json

chore: mode changes

2026-06-06 15:47:25 +02:00

kustomization.yaml

chore: mode changes

2026-06-06 15:47:25 +02:00

nowchess-env-config.yaml

chore: mode changes

2026-06-06 15:47:25 +02:00

nowchess-frontend-env-config.yaml

chore: mode changes

2026-06-06 15:47:25 +02:00

nowchess-hpa.yaml

feat(nci-11): add Kubernetes manifests for nowchess-analysis service

2026-06-10 16:03:20 +02:00

nowchess-rollouts.yaml

fix(official-bots): mount JWT public key from ncs-jwt-keys

2026-06-17 09:42:21 +02:00

nowchess-services.yaml

feat(nci-11): add Kubernetes manifests for nowchess-analysis service

2026-06-10 16:03:20 +02:00

rollout-transform.yaml

chore: mode changes

2026-06-06 15:47:25 +02:00