apiVersion: v1
kind: Secret
metadata:
  name: pbsupper-deployment-1-secretmap
  namespace: CHANGE_ME
  labels:
    server: Server-1
    idrac: v7
type: Opaque
data:
  IDRAC_PWD: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
  HOST_USR_PWD: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
  HOST_USR_SSHKEY_PASS: c29tZXRoaW5nQnV0SW5CYXNlNjQ=

  # Must be base64 of the ENTIRE private key, as one base64 value.
  # base64 -w 0 id_ed25519
  HOST_USR_SSHKEY: c29tZXRoaW5nQnV0SW5CYXNlNjQ=


# Alternatively you can also use this option instead of PRIVATE_KEY: 123...

stringData:
  HOST_USR_SSHKEY: |
    -----BEGIN OPENSSH PRIVATE KEY-----
    123...
    -----END OPENSSH PRIVATE KEY-----
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: pbsupper-deployment-1-configmap
  namespace: CHANGE_ME
  labels:
    server: Server-1
    idrac: v7
data:
  IDRAC: somethingSomething
  IDRAC_USR: somethingSomething
  HOST: somethingSomething
  HOST_SSH_PORT: somethingSomething
  HOST_USR: somethingSomething
  LOCAL_DATASTORE: somethingSomething
  REMOTE_DATASTORE: somethingSomething
  REMOTE_PBS: somethingSomething
  SYNC_DIR: somethingSomething
  PBS_RATE_OUT: somethingSomething
  PBS_RATE_IN: somethingSomething
  PBS_TASK_LIMIT: somethingSomething
  PBS_MAX_RUNTIME_MIN: somethingSomething
  PBS_MAX_SHUT_MIN: somethingSomething
  AUTO_ADD_NAME: somethingSomething
  RUN_SCHEDULE: "45 10 * * SUN"

---
apiVersion: apps/v1
kind: Deployment

metadata:
  name: pbsupper
  namespace: CHANGE_ME
  labels:
    server: Server-1
    idrac: v7

spec:
  replicas: 1

  selector:
    matchLabels:
      app: pbsupper

  template:
    metadata:
      labels:
        app: pbsupper
        server: Server-1
        idrac: v7

    spec:
      automountServiceAccountToken: false

      securityContext:
        appArmorProfile:
          type: RuntimeDefault

      containers:
        - name: pbsupper
          image: tea.shupogaki.org/yuruc3/pbsupper:v0.2.1
          imagePullPolicy: IfNotPresent

          envFrom:
            - secretRef:
                name: pbsupper-deployment-1-secretmap
            - configMapRef:
                name: pbsupper-deployment-1-configmap

          securityContext:
            runAsUser: 1600
            runAsGroup: 1600
            runAsNonRoot: true
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            seccompProfile:
              type: RuntimeDefault

          resources:
            limits:
              cpu: 200m
              memory: 128Mi
            requests:
              cpu: 100m
              memory: 64Mi