---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: cs16-restart-sa

---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: cs16-restart-role
rules:
  - apiGroups: ["apps"]
    resources: ["deployments"]
    verbs: ["get", "patch"]

---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: cs16-restart-rb
subjects:
  - kind: ServiceAccount
    name: cs16-restart-sa
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: cs16-restart-role

---
apiVersion: batch/v1
kind: CronJob
metadata:
  name: cs16-daily-restart
spec:
  schedule: "* * * * *" # every day at 04:00
  jobTemplate:
    spec:
      template:
        spec:
          serviceAccountName: cs16-restart-sa
          restartPolicy: OnFailure
          containers:
            - name: kubectl
              image: bitnami/kubectl:latest
              env:
                - name: POD_NAMESPACE
                  valueFrom:
                    fieldRef:
                      fieldPath: metadata.namespace
              command:
                - /bin/sh
                - -c
                - |
                  kubectl -n "$POD_NAMESPACE" rollout restart deployment/counter-strike-16