1
0
Fork 0
kubernetes/xactfetch/xactfetch.yaml

84 lines
2.4 KiB
YAML

apiVersion: batch/v1
kind: CronJob
metadata:
name: xactfetch
labels:
app.kubernetes.io/name: xactfetch
app.kubernetes.io/component: xactfetch
app.kubernetes.io/part-of: xactfetch
spec:
schedule: 4 9 * * *
timeZone: America/Chicago
concurrencyPolicy: Forbid
jobTemplate:
spec:
template:
metadata:
labels:
app.kubernetes.io/name: xactfetch
app.kubernetes.io/component: xactfetch
app.kubernetes.io/part-of: xactfetch
spec:
restartPolicy: Never
imagePullSecrets:
- name: imagepull-gitea
initContainers:
- name: wait
image: registry.fedoraproject.org/fedora-minimal
command:
- sh
- -c
- sleep $((RANDOM % 3600))
securityContext:
readOnlyRootFilesystem: true
runAsGroup: 999
runAsUser: 999
- name: sync
image: git.pyrocufflink.net/packages/xactfetch
command:
- rbw
- sync
securityContext:
readOnlyRootFilesystem: true
volumeMounts:
- mountPath: /var/lib/xactfetch
name: xactfetch-data
subPath: data
containers:
- name: xactfetch
image: git.pyrocufflink.net/packages/xactfetch
envFrom:
- configMapRef:
name: xactfetch
securityContext:
readOnlyRootFilesystem: true
volumeMounts:
- mountPath: /etc/rbw
name: xactfetch-rbw
readOnly: true
- mountPath: /run/secrets/xactfetch
name: xactfetch-secrets
readOnly: true
- mountPath: /tmp
name: tmp
subPath: tmp
- mountPath: /var/lib/xactfetch
name: xactfetch-data
subPath: data
securityContext:
fsGroup: 2468
runAsNonRoot: true
volumes:
- name: tmp
emptyDir:
medium: Memory
- name: xactfetch-data
persistentVolumeClaim:
claimName: xactfetch
- name: xactfetch-rbw
configMap:
name: xactfetch-rbw
- name: xactfetch-secrets
secret:
secretName: xactfetch