From f8da55968815aa89f7097e5049f5770a36a4d83a Mon Sep 17 00:00:00 2001
From: Keith Walsh <kwalsh@redhat.com>
Date: Tue, 3 Dec 2024 12:53:44 -0500
Subject: [PATCH] Pass `READ_ONLY_API_MODE` to the `worker-service`

In order for this check [1] to pass when running the migrator via Turnpike, which
will kick it off in a worker, we need to ensure the param set in the environment
is set on the worker pod as well.

[1] https://github.com/RedHatInsights/insights-rbac/blob/240ffff00a989af6b4ea2f0320459df76200737e/rbac/migration_tool/migrate.py#L186
---
 deploy/rbac-clowdapp.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/deploy/rbac-clowdapp.yml b/deploy/rbac-clowdapp.yml
index 911f3241..2ffc3a01 100644
--- a/deploy/rbac-clowdapp.yml
+++ b/deploy/rbac-clowdapp.yml
@@ -238,6 +238,9 @@ objects:
             value: ${PRINCIPAL_CLEANUP_DELETION_ENABLED_UMB}
           - name: UMB_JOB_ENABLED
             value: ${UMB_JOB_ENABLED}
+          - name: READ_ONLY_API_MODE
+            value: ${READ_ONLY_API_MODE}
+
     - name: scheduler-service
       minReplicas: ${{MIN_SCHEDULER_REPLICAS}}
       metadata: