# services/veles/retention-cronjob.yaml
apiVersion: batch/v1
kind: CronJob
metadata:
  name: veles-retention
  namespace: veles
  labels:
    app: veles-retention
spec:
  schedule: "17 4 * * *"
  concurrencyPolicy: Forbid
  successfulJobsHistoryLimit: 1
  failedJobsHistoryLimit: 3
  jobTemplate:
    spec:
      template:
        metadata:
          labels:
            app: veles-retention
        spec:
          restartPolicy: Never
          serviceAccountName: veles-retention
          automountServiceAccountToken: false
          priorityClassName: veles-core
          nodeSelector:
            veles.bstein.dev/node-pool: oceanus
            kubernetes.io/arch: amd64
          tolerations:
            - key: veles.bstein.dev/simulation
              operator: Equal
              value: "true"
              effect: NoSchedule
          securityContext:
            fsGroup: 10001
            fsGroupChangePolicy: OnRootMismatch
            seccompProfile:
              type: RuntimeDefault
          containers:
            - name: retention
              image: registry.bstein.dev/veles/veles-backend:0.6.50 # {"$imagepolicy": "veles:veles-backend"}
              imagePullPolicy: IfNotPresent
              command: ["veles-hygiene"]
              args: ["--prune-artifacts"]
              envFrom:
                - configMapRef:
                    name: veles-config
              volumeMounts:
                - name: artifacts
                  mountPath: /data/veles-artifacts
              resources:
                requests:
                  cpu: 50m
                  memory: 128Mi
                limits:
                  cpu: 250m
                  memory: 512Mi
              securityContext:
                runAsNonRoot: true
                runAsUser: 10001
                runAsGroup: 10001
                allowPrivilegeEscalation: false
                capabilities:
                  drop: ["ALL"]
          volumes:
            - name: artifacts
              persistentVolumeClaim:
                claimName: veles-artifacts