apiVersion: v1
kind: Secret
metadata:
  name: pbsupper-deployment-1-secretmap
  namespace: CHANGE_ME
  labels:
    server: Server-1
    idrac: v7
type: Opaque
data:
  IDRAC_PWD: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
  HOST_USR_PWD: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
  HOST_USR_SSHKEY_PASS: c29tZXRoaW5nQnV0SW5CYXNlNjQ=

  # Must be base64 of the ENTIRE private key, as one base64 value.
  # base64 -w 0 id_ed25519
  HOST_USR_SSHKEY: c29tZXRoaW5nQnV0SW5CYXNlNjQ=


# Alternatively you can also use this option instead of PRIVATE_KEY: 123...

stringData:
  PRIVATE_KEY: |
    -----BEGIN OPENSSH PRIVATE KEY-----
    123...
    -----END OPENSSH PRIVATE KEY-----
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: pbsupper-deployment-1-configmap
  namespace: CHANGE_ME
  labels:
    server: Server-1
    idrac: v7
data:
  IDRAC: somethingSomething
  IDRAC_USR: somethingSomething
  HOST: somethingSomething
  HOST_SSH_PORT: somethingSomething
  HOST_USR: somethingSomething
  LOCAL_DATASTORE: somethingSomething
  REMOTE_DATASTORE: somethingSomething
  REMOTE_PBS: somethingSomething
  SYNC_DIR: somethingSomething
  PBS_RATE_OUT: somethingSomething
  PBS_RATE_IN: somethingSomething
  PBS_TASK_LIMIT: somethingSomething
  PBS_MAX_RUNTIME_MIN: somethingSomething
  PBS_MAX_SHUT_MIN: somethingSomething
  AUTO_ADD_NAME  : somethingSomething

---
apiVersion: batch/v1
kind: CronJob
metadata:
  name: pbsupper
  namespace: CHANGE_ME
  labels:
    server: Server-1
    idrac: v7

spec:
  schedule: "*/15 * * * *"
  timeZone: "Europe/Stockholm"
  concurrencyPolicy: Forbid

  successfulJobsHistoryLimit: 3
  failedJobsHistoryLimit: 3

  jobTemplate:
    spec:
      backoffLimit: 2

      template:
        spec:
          restartPolicy: Never
          automountServiceAccountToken: false

          securityContext:
            appArmorProfile:
              type: RuntimeDefault

          containers:
            - name: pbsupper
              image: tea.shupogaki.org/yuruc3/pbsupper:v0
              imagePullPolicy: IfNotPresent

              envFrom:
                - secretRef:
                    name: pbsupper-deployment-1-secretmap
                - configMapRef:
                    name: pbsupper-deployment-1-configmap

              securityContext:
                runAsUser: 1600
                runAsGroup: 1600
                runAsNonRoot: true
                allowPrivilegeEscalation: false
                capabilities:
                  drop:
                    - ALL
                seccompProfile:
                  type: RuntimeDefault

              resources:
                limits:
                  cpu: 200m
                  memory: 128Mi
                requests:
                  cpu: 100m
                  memory: 64Mi