ceph-csi/mirror/mirror-cronjob.yaml

44 lines
1.3 KiB
YAML
Raw Normal View History

---
apiVersion: batch/v1
kind: CronJob
metadata:
name: mirror-images
labels:
app: mirror-images
spec:
schedule: '@daily'
jobTemplate:
spec:
template:
metadata:
labels:
app: mirror-images
spec:
containers:
- name: mirror-images
image: image-registry.openshift-image-registry.svc:5000/ceph-csi/mirror-images:latest
env:
- name: DOCKER_CONFIG_JSON
valueFrom:
secretKeyRef:
name: cephcsibot-docker-io
key: .dockerconfigjson
- name: CI_REGISTRY_USER
valueFrom:
secretKeyRef:
name: container-registry-auth
key: username
- name: CI_REGISTRY_PASSWD
valueFrom:
secretKeyRef:
name: container-registry-auth
key: passwd
securityContext:
allowPrivilegeEscalation: false
runAsNonRoot: true
capabilities:
drop: ["ALL"]
seccompProfile:
type: RuntimeDefault
restartPolicy: OnFailure