Init

manifest.yaml

@@ -0,0 +1,170 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: pbsupper-deployment-1-secretmap
+  namespace: <CHANGE_ME>
+  labels:
+    server: Server-1
+    idrac: v7
+data:
+
+  IDRAC_PWD: abc
+  # HOST_USR_PWD: 
+  HOST_USR_SSHKEY_PASS: abc
+
+  HOST_USR_SSHKEY: |
+    -----BEGIN OPENSSH PRIVATE KEY-----
+    123....
+    -----END OPENSSH PRIVATE KEY-----
+
+    but base64 encoded
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: pbsupper-deployment-1-configmap
+  namespace: <CHANGE_ME>
+  labels:
+    server: Server-1
+    idrac: v7
+data:
+  IDRAC: abc
+  IDRAC_USR: abc
+
+  HOST: abc
+  # HOST_SSH_PORT: 22
+  HOST_USR: abc
+
+  LOCAL_DATASTORE: abc
+  REMOTE_DATASTORE: abc
+  REMOTE_PBS: abc
+  # SYNC_DIR: push
+
+  # PBS_RATE_OUT: 123
+  # PBS_RATE_IN: 123
+  # PBS_TASK_LIMIT: 123
+  PBS_MAX_RUNTIME_MIN: "180"
+  PBS_MAX_SHUT_MIN: "10"
+
+  AUTO_ADD_NAME: MySuperWakeupper
+  RUN_SCHEDULE: "15 15 * * SUN"
+
+
+
+---
+
+
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: pbsupper
+  namespace: <CHANGE_ME>
+  labels:
+    server: Server-1
+    idrac: v7
+spec:
+  schedule: "*/15 * * * *"
+  timeZone: "Europe/Stockholm"
+  concurrencyPolicy: Forbid
+
+  successfulJobsHistoryLimit: 3
+  failedJobsHistoryLimit: 3
+
+  jobTemplate:
+    spec:
+      backoffLimit: 2
+
+      template:
+        spec:
+          restartPolicy: Never
+
+          containers:
+            - name: pbsupper
+              image: tea.shupogaki.org/yuruc3/pbsupper:v0
+              imagePullPolicy: IfNotPresent
+
+              envFrom:
+                - secretRef:
+                    name: pbsupper-deployment-1-secretmap
+                - configMapRef:
+                    name: pbsupper-deployment-1-configmap
+
+              securityContext:
+                runAsUser: 1600
+                runAsGroup: 1600
+                runAsNonRoot: true
+                allowPrivilegeEscalation: false
+                capabilities:
+                  drop:
+                    - ALL
+                seccompProfile:
+                  type: RuntimeDefault
+
+              resources:
+                limits:
+                  cpu: 200m
+                  memory: 128Mi
+                requests:
+                  cpu: 100m
+                  memory: 64Mi
+
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pbsupper-deployment-1
+  namespace: <CHANGE_ME>
+  labels:
+    server: Server-1
+    idrac: v7
+
+
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      server: Server-1
+  template:
+    metadata:
+      labels:
+        server: Server-1
+    spec:
+      automountServiceAccountToken: false   # Container doesn't need service account token
+      securityContext:
+        appArmorProfile:
+          type: RuntimeDefault
+        # runAsNonRoot: true
+        # fsGroup: 1500
+        # runAsGroup: 1500
+        # runAsUser: 1500
+
+      containers:
+        - name: pbsupper
+          image: tea.shupogaki.org/yuruc3/pbsupper:latest
+          imagePullPolicy: IfNotPresent
+
+          envFrom:
+            - secretRef:
+                name: pbsupper-deployment-1-secretmap
+            - configMapRef:
+                name: pbsupper-deployment-1-configmap
+
+          securityContext:
+            runAsUser: 1600
+            runAsGroup: 1600
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 200m
+              memory: 128Mi
+            requests:
+              cpu: 100m
+              memory: 64Mi