apiVersion: batch/v1
kind: CronJob
metadata:
  name: firefly-data-importer-sync
  labels:
    app.kubernetes.io/name: firefly-data-importer-sync
spec:
  schedule: "17 */6 * * *"
  timeZone: Europe/London
  concurrencyPolicy: Forbid
  startingDeadlineSeconds: 1800
  successfulJobsHistoryLimit: 2
  failedJobsHistoryLimit: 5
  jobTemplate:
    spec:
      backoffLimit: 1
      activeDeadlineSeconds: 1200
      template:
        metadata:
          labels:
            app.kubernetes.io/name: firefly-data-importer-sync
        spec:
          automountServiceAccountToken: false
          restartPolicy: Never
          nodeSelector:
            kubernetes.io/hostname: ai.tail2fe2d.ts.net
          tolerations:
            - key: workload
              operator: Equal
              value: ai
              effect: NoSchedule
          containers:
            - name: data-importer-sync
              image: fireflyiii/data-importer:version-2.3.4
              imagePullPolicy: IfNotPresent
              command:
                - php
                - artisan
                - importer:import
                - /import/import.json
              env:
                - name: FIREFLY_III_URL
                  value: http://firefly-iii
                - name: VANITY_URL
                  value: http://ff.lan
                - name: FIREFLY_III_ACCESS_TOKEN
                  valueFrom:
                    secretKeyRef:
                      name: firefly-data-importer-secrets
                      key: FIREFLY_III_ACCESS_TOKEN
                - name: ENABLE_BANKING_APP_ID
                  valueFrom:
                    secretKeyRef:
                      name: firefly-data-importer-secrets
                      key: ENABLE_BANKING_APP_ID
                - name: ENABLE_BANKING_PRIVATE_KEY
                  valueFrom:
                    secretKeyRef:
                      name: firefly-data-importer-secrets
                      key: ENABLE_BANKING_PRIVATE_KEY
                - name: IMPORT_DIR_ALLOWLIST
                  value: /import
                - name: TZ
                  value: Europe/London
                - name: APP_ENV
                  value: production
                - name: APP_DEBUG
                  value: "false"
                - name: LOG_LEVEL
                  value: notice
              volumeMounts:
                - name: import-config
                  mountPath: /import
                  readOnly: true
              resources:
                requests:
                  cpu: 50m
                  memory: 128Mi
                limits:
                  cpu: "1"
                  memory: 512Mi
              securityContext:
                allowPrivilegeEscalation: false
                capabilities:
                  drop:
                    - ALL
          volumes:
            - name: import-config
              secret:
                secretName: firefly-data-importer-secrets
                items:
                  - key: import.json
                    path: import.json
          securityContext:
            seccompProfile:
              type: RuntimeDefault