apiVersion: batch/v1
kind: CronJob
metadata:
  name: rent-reminder
  labels:
    app.kubernetes.io/name: rent-reminder
    app.kubernetes.io/component: rent-reminder
    app.kubernetes.io/instance: rent-reminder
    app.kubernetes.io/part-of: rent-reminder
spec:
  schedule: 4 1 21-25 * *
  timeZone: America/Chicago
  concurrencyPolicy: Forbid
  jobTemplate:
    metadata:
      labels:
        app.kubernetes.io/name: rent-reminder
        app.kubernetes.io/component: rent-reminder
        app.kubernetes.io/instance: rent-reminder
        app.kubernetes.io/part-of: rent-reminder
    spec:
      template:
        spec:
          restartPolicy: OnFailure
          imagePullSecrets:
          - name: imagepull-gitea
          containers:
          - name: rent-reminder
            image: git.pyrocufflink.net/packages/rent-reminder
            env:
            - name: RUST_LOG
              value: INFO,rent_reminder=TRACE
            securityContext:
              readOnlyRootFilesystem: true
            volumeMounts:
            - mountPath: /usr/local/share/rent-reminder/data.toml
              name: data
              subPath: data.toml
              readOnly: true
          securityContext:
            runAsNonRoot: true
            runAsUser: 1174
            runAsGroup: 1174
          volumes:
          - name: data
            secret:
              secretName: rent-reminder
              defaultMode: 0644