titan-iac/services/cassandra/migration-jobs/artifact-permissions-job.yaml

43 lines
1.3 KiB
YAML
Raw Normal View History

# services/cassandra/migration-jobs/artifact-permissions-job.yaml
# One-off migration repair after copying artifacts from the Veles PVC.
apiVersion: batch/v1
kind: Job
metadata:
name: cassandra-artifact-permissions-2
namespace: cassandra
spec:
suspend: true
backoffLimit: 0
ttlSecondsAfterFinished: 86400
template:
spec:
serviceAccountName: cassandra-artifact-migration
automountServiceAccountToken: false
restartPolicy: Never
nodeSelector:
cassandra.bstein.dev/node-pool: oceanus
tolerations:
- key: veles.bstein.dev/simulation
operator: Equal
value: "true"
effect: NoSchedule
containers:
- name: permissions
image: alpine:3.20
imagePullPolicy: IfNotPresent
command: ["/bin/sh", "-c"]
args:
- |
set -eu
chown -R 10001:10001 /data/cassandra-artifacts
find /data/cassandra-artifacts -type d -exec chmod 2775 {} +
find /data/cassandra-artifacts -type f -exec chmod 0664 {} +
printf 'artifact permission repair complete\n'
volumeMounts:
- name: artifacts
mountPath: /data/cassandra-artifacts
volumes:
- name: artifacts
persistentVolumeClaim:
claimName: cassandra-artifacts