First version that is cron-based

manifest.yaml

@@ -0,0 +1,112 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: pbsupper-deployment-1-secretmap
+  namespace: CHANGE_ME
+  labels:
+    server: Server-1
+    idrac: v7
+type: Opaque
+data:
+  IDRAC_PWD: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
+  HOST_USR_PWD: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
+  HOST_USR_SSHKEY_PASS: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
+
+  # Must be base64 of the ENTIRE private key, as one base64 value.
+  # base64 -w 0 id_ed25519
+  HOST_USR_SSHKEY: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
+
+
+# Alternatively you can also use this option instead of PRIVATE_KEY: 123...
+
+stringData:
+  PRIVATE_KEY: |
+    -----BEGIN OPENSSH PRIVATE KEY-----
+    123...
+    -----END OPENSSH PRIVATE KEY-----
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: pbsupper-deployment-1-configmap
+  namespace: CHANGE_ME
+  labels:
+    server: Server-1
+    idrac: v7
+data:
+  IDRAC: somethingSomething
+  IDRAC_USR: somethingSomething
+  HOST: somethingSomething
+  HOST_SSH_PORT: somethingSomething
+  HOST_USR: somethingSomething
+  LOCAL_DATASTORE: somethingSomething
+  REMOTE_DATASTORE: somethingSomething
+  REMOTE_PBS: somethingSomething
+  SYNC_DIR: somethingSomething
+  PBS_RATE_OUT: somethingSomething
+  PBS_RATE_IN: somethingSomething
+  PBS_TASK_LIMIT: somethingSomething
+  PBS_MAX_RUNTIME_MIN: somethingSomething
+  PBS_MAX_SHUT_MIN: somethingSomething
+  AUTO_ADD_NAME  : somethingSomething
+
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: pbsupper
+  namespace: CHANGE_ME
+  labels:
+    server: Server-1
+    idrac: v7
+
+spec:
+  schedule: "*/15 * * * *"
+  timeZone: "Europe/Stockholm"
+  concurrencyPolicy: Forbid
+
+  successfulJobsHistoryLimit: 3
+  failedJobsHistoryLimit: 3
+
+  jobTemplate:
+    spec:
+      backoffLimit: 2
+
+      template:
+        spec:
+          restartPolicy: Never
+          automountServiceAccountToken: false
+
+          securityContext:
+            appArmorProfile:
+              type: RuntimeDefault
+
+          containers:
+            - name: pbsupper
+              image: tea.shupogaki.org/yuruc3/pbsupper:v0
+              imagePullPolicy: IfNotPresent
+
+              envFrom:
+                - secretRef:
+                    name: pbsupper-deployment-1-secretmap
+                - configMapRef:
+                    name: pbsupper-deployment-1-configmap
+
+              securityContext:
+                runAsUser: 1600
+                runAsGroup: 1600
+                runAsNonRoot: true
+                allowPrivilegeEscalation: false
+                capabilities:
+                  drop:
+                    - ALL
+                seccompProfile:
+                  type: RuntimeDefault
+
+              resources:
+                limits:
+                  cpu: 200m
+                  memory: 128Mi
+                requests:
+                  cpu: 100m
+                  memory: 64Mi