From 4b934bb9fd1011d42c2372251a0b407763fb6081 Mon Sep 17 00:00:00 2001
From: OG T <ogt@WOOOMacMiniM4.local>
Date: Sun, 5 Apr 2026 11:47:37 +0800
Subject: [PATCH] =?UTF-8?q?feat(k8s):=20API=20Pod=20=E6=8E=9B=E8=BC=89=20r?=
 =?UTF-8?q?epair=20SSH=20key=20(Task=2013)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 06-deployment-api.yaml: volumeMount /etc/repair-ssh + volumes secret defaultMode 0400
- 對應 K8s Secret: awoooi-repair-ssh-key

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 k8s/awoooi-prod/06-deployment-api.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/k8s/awoooi-prod/06-deployment-api.yaml b/k8s/awoooi-prod/06-deployment-api.yaml
index b6d8c2175..2ab002cf5 100644
--- a/k8s/awoooi-prod/06-deployment-api.yaml
+++ b/k8s/awoooi-prod/06-deployment-api.yaml
@@ -50,6 +50,11 @@ spec:
                 name: awoooi-config
             - secretRef:
                 name: awoooi-secrets
+          # 2026-04-05 Claude Code: Sprint 3 — 掛載 SSH key 供 HostRepairAgent 使用
+          volumeMounts:
+            - name: repair-ssh-key
+              mountPath: /etc/repair-ssh
+              readOnly: true
           resources:
             requests:
               cpu: "200m"
@@ -92,6 +97,12 @@ spec:
                   matchLabels:
                     app: awoooi-api
                 topologyKey: kubernetes.io/hostname
+      # 2026-04-05 Claude Code: Sprint 3 — repair SSH key (defaultMode 0400)
+      volumes:
+        - name: repair-ssh-key
+          secret:
+            secretName: awoooi-repair-ssh-key
+            defaultMode: 0400
 
 ---
 apiVersion: v1