Files
PBSupper/manifest.yaml

112 lines
2.7 KiB
YAML

apiVersion: v1
kind: Secret
metadata:
name: pbsupper-deployment-1-secretmap
namespace: CHANGE_ME
labels:
server: Server-1
idrac: v7
type: Opaque
data:
IDRAC_PWD: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
HOST_USR_PWD: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
HOST_USR_SSHKEY_PASS: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
# Must be base64 of the ENTIRE private key, as one base64 value.
# base64 -w 0 id_ed25519
HOST_USR_SSHKEY: c29tZXRoaW5nQnV0SW5CYXNlNjQ=
# Alternatively you can also use this option instead of PRIVATE_KEY: 123...
stringData:
PRIVATE_KEY: |
-----BEGIN OPENSSH PRIVATE KEY-----
123...
-----END OPENSSH PRIVATE KEY-----
---
apiVersion: v1
kind: ConfigMap
metadata:
name: pbsupper-deployment-1-configmap
namespace: CHANGE_ME
labels:
server: Server-1
idrac: v7
data:
IDRAC: somethingSomething
IDRAC_USR: somethingSomething
HOST: somethingSomething
HOST_SSH_PORT: somethingSomething
HOST_USR: somethingSomething
LOCAL_DATASTORE: somethingSomething
REMOTE_DATASTORE: somethingSomething
REMOTE_PBS: somethingSomething
SYNC_DIR: somethingSomething
PBS_RATE_OUT: somethingSomething
PBS_RATE_IN: somethingSomething
PBS_TASK_LIMIT: somethingSomething
PBS_MAX_RUNTIME_MIN: somethingSomething
PBS_MAX_SHUT_MIN: somethingSomething
AUTO_ADD_NAME : somethingSomething
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: pbsupper
namespace: CHANGE_ME
labels:
server: Server-1
idrac: v7
spec:
schedule: "*/15 * * * *"
timeZone: "Europe/Stockholm"
concurrencyPolicy: Forbid
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
jobTemplate:
spec:
backoffLimit: 2
template:
spec:
restartPolicy: Never
automountServiceAccountToken: false
securityContext:
appArmorProfile:
type: RuntimeDefault
containers:
- name: pbsupper
image: tea.shupogaki.org/yuruc3/pbsupper:v0
imagePullPolicy: IfNotPresent
envFrom:
- secretRef:
name: pbsupper-deployment-1-secretmap
- configMapRef:
name: pbsupper-deployment-1-configmap
securityContext:
runAsUser: 1600
runAsGroup: 1600
runAsNonRoot: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
resources:
limits:
cpu: 200m
memory: 128Mi
requests:
cpu: 100m
memory: 64Mi