apiVersion: v1
kind: Pod
metadata:
  name: vaultwarden-migration
  namespace: vaultwarden
  labels: &labels
    app.kubernetes.io/name: vaultwarden
    app.kubernetes.io/component: migration
spec:
  containers:
  - name: migration
    image: busybox
    command:
    - sh
    - -c
    - |
      trap 'kill $!' TERM
      sleep 99999 &
      wait
    securityContext:
      readOnlyRootFilesystem: true
    volumeMounts:
    - mountPath: /data
      name: data
      subPath: data
  securityContext:
    runAsUser: 266
    runAsGroup: 266
    fsGroup: 266
    fsGroupChangePolicy: OnRootMismatch
  volumes:
  - name: data
    persistentVolumeClaim:
      claimName: vaultwarden