---
apiVersion: batch/v1
kind: CronJob
metadata:
  name: khm-client
  labels:
    app: khm-client
spec:
  schedule: "* * * * *"
  concurrencyPolicy: Forbid
  successfulJobsHistoryLimit: 3
  failedJobsHistoryLimit: 3
  jobTemplate:
    spec:
      template:
        metadata:
          labels:
            app: khm-client
        spec:
          restartPolicy: OnFailure
          nodeSelector:
            node-role.kubernetes.io/desktop: ""
          tolerations:
            - key: workload
              operator: Equal
              value: desktop
              effect: NoSchedule
          containers:
            - name: khm-client
              image: 'ultradesu/khm:latest'
              imagePullPolicy: Always
              securityContext:
                privileged: false
              resources:
                requests:
                  memory: "64Mi"
                  cpu: "50m"
                limits:
                  memory: "256Mi"
                  cpu: "200m"
              command:
                - /bin/sh
                - -c
                - |
                  hostname "$NODE_NAME"
                  /usr/local/bin/khm \
                    --known-hosts /host-ssh/known_hosts \
                    --host https://khm.hexor.cy \
                    --flow=private \
                    --basic-auth="${USERNAME}:${PASSWORD}" \
                    --in-place
              env:
                - name: NODE_NAME
                  valueFrom:
                    fieldRef:
                      fieldPath: spec.nodeName
                - name: USERNAME
                  valueFrom:
                    secretKeyRef:
                      name: khm-client-creds
                      key: USERNAME
                - name: PASSWORD
                  valueFrom:
                    secretKeyRef:
                      name: khm-client-creds
                      key: PASSWORD
              volumeMounts:
                - name: known-hosts
                  mountPath: /host-ssh/known_hosts
          volumes:
            - name: known-hosts
              hostPath:
                path: /home/ab/.ssh/known_hosts