# services/keycloak/portal-e2e-client-secret-sync-cronjob.yaml
apiVersion: batch/v1
kind: CronJob
metadata:
  name: portal-e2e-client-secret-sync
  namespace: sso
spec:
  schedule: "*/10 * * * *"
  concurrencyPolicy: Forbid
  successfulJobsHistoryLimit: 1
  failedJobsHistoryLimit: 3
  jobTemplate:
    spec:
      backoffLimit: 1
      template:
        spec:
          serviceAccountName: portal-e2e-client-secret-sync
          restartPolicy: Never
          containers:
            - name: sync
              image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131
              command: ["/usr/bin/env", "bash"]
              args: ["/scripts/sso_portal_e2e_client_secret_sync.sh"]
              volumeMounts:
                - name: script
                  mountPath: /scripts
                  readOnly: true
          volumes:
            - name: script
              configMap:
                name: portal-e2e-client-secret-sync-script
                defaultMode: 0555