apiVersion: v1
kind: Secret
metadata:
  name: pbsupper-deployment-1-secretmap
  namespace: <CHANGE_ME>
  labels:
    server: Server-1
    idrac: v7
data:

  IDRAC_PWD: abc
  # HOST_USR_PWD: 
  HOST_USR_SSHKEY_PASS: abc

  HOST_USR_SSHKEY: |
    -----BEGIN OPENSSH PRIVATE KEY-----
    123....
    -----END OPENSSH PRIVATE KEY-----

    but base64 encoded

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: pbsupper-deployment-1-configmap
  namespace: <CHANGE_ME>
  labels:
    server: Server-1
    idrac: v7
data:
  IDRAC: abc
  IDRAC_USR: abc

  HOST: abc
  # HOST_SSH_PORT: 22
  HOST_USR: abc

  LOCAL_DATASTORE: abc
  REMOTE_DATASTORE: abc
  REMOTE_PBS: abc
  # SYNC_DIR: push

  # PBS_RATE_OUT: 123
  # PBS_RATE_IN: 123
  # PBS_TASK_LIMIT: 123
  PBS_MAX_RUNTIME_MIN: "180"
  PBS_MAX_SHUT_MIN: "10"

  AUTO_ADD_NAME: MySuperWakeupper
  RUN_SCHEDULE: "15 15 * * SUN"



---


apiVersion: batch/v1
kind: CronJob
metadata:
  name: pbsupper
  namespace: <CHANGE_ME>
  labels:
    server: Server-1
    idrac: v7
spec:
  schedule: "*/15 * * * *"
  timeZone: "Europe/Stockholm"
  concurrencyPolicy: Forbid

  successfulJobsHistoryLimit: 3
  failedJobsHistoryLimit: 3

  jobTemplate:
    spec:
      backoffLimit: 2

      template:
        spec:
          restartPolicy: Never

          containers:
            - name: pbsupper
              image: tea.shupogaki.org/yuruc3/pbsupper:v0
              imagePullPolicy: IfNotPresent

              envFrom:
                - secretRef:
                    name: pbsupper-deployment-1-secretmap
                - configMapRef:
                    name: pbsupper-deployment-1-configmap

              securityContext:
                runAsUser: 1600
                runAsGroup: 1600
                runAsNonRoot: true
                allowPrivilegeEscalation: false
                capabilities:
                  drop:
                    - ALL
                seccompProfile:
                  type: RuntimeDefault

              resources:
                limits:
                  cpu: 200m
                  memory: 128Mi
                requests:
                  cpu: 100m
                  memory: 64Mi


---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: pbsupper-deployment-1
  namespace: <CHANGE_ME>
  labels:
    server: Server-1
    idrac: v7


spec:
  replicas: 1
  selector:
    matchLabels:
      server: Server-1
  template:
    metadata:
      labels:
        server: Server-1
    spec:
      automountServiceAccountToken: false   # Container doesn't need service account token
      securityContext:
        appArmorProfile:
          type: RuntimeDefault
        # runAsNonRoot: true
        # fsGroup: 1500
        # runAsGroup: 1500
        # runAsUser: 1500

      containers:
        - name: pbsupper
          image: tea.shupogaki.org/yuruc3/pbsupper:latest
          imagePullPolicy: IfNotPresent

          envFrom:
            - secretRef:
                name: pbsupper-deployment-1-secretmap
            - configMapRef:
                name: pbsupper-deployment-1-configmap

          securityContext:
            runAsUser: 1600
            runAsGroup: 1600
            runAsNonRoot: true
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            seccompProfile:
              type: RuntimeDefault
          resources:
            limits:
              cpu: 200m
              memory: 128Mi
            requests:
              cpu: 100m
              memory: 64Mi