github.com/percona/percona-xtradb-cluster-operator@v1.14.0/e2e-tests/security-context/compare/job.batch_xb-on-demand-backup-s3-k129.yml (about)

     1  apiVersion: batch/v1
     2  kind: Job
     3  metadata:
     4    annotations:
     5      openshift.io/scc: privileged
     6    generation: 1
     7    labels:
     8      backup-name: on-demand-backup-s3
     9      cluster: sec-context
    10      job-name: xb-on-demand-backup-s3
    11      type: xtrabackup
    12    name: xb-on-demand-backup-s3
    13    ownerReferences:
    14      - controller: true
    15        kind: PerconaXtraDBClusterBackup
    16        name: on-demand-backup-s3
    17  spec:
    18    backoffLimit: 10
    19    completionMode: NonIndexed
    20    completions: 1
    21    manualSelector: true
    22    parallelism: 1
    23    podReplacementPolicy: TerminatingOrFailed
    24    selector:
    25      matchLabels:
    26        backup-name: on-demand-backup-s3
    27        cluster: sec-context
    28        job-name: xb-on-demand-backup-s3
    29        type: xtrabackup
    30    suspend: false
    31    template:
    32      metadata:
    33        annotations:
    34          openshift.io/scc: privileged
    35        labels:
    36          backup-name: on-demand-backup-s3
    37          cluster: sec-context
    38          job-name: xb-on-demand-backup-s3
    39          type: xtrabackup
    40      spec:
    41        containers:
    42          - command:
    43              - bash
    44              - /usr/bin/backup.sh
    45            env:
    46              - name: BACKUP_DIR
    47                value: /backup
    48              - name: PXC_SERVICE
    49                value: sec-context-pxc
    50              - name: PXC_PASS
    51                valueFrom:
    52                  secretKeyRef:
    53                    key: xtrabackup
    54                    name: my-cluster-secrets
    55              - name: VERIFY_TLS
    56                value: "true"
    57              - name: ACCESS_KEY_ID
    58                valueFrom:
    59                  secretKeyRef:
    60                    key: AWS_ACCESS_KEY_ID
    61                    name: minio-secret
    62              - name: SECRET_ACCESS_KEY
    63                valueFrom:
    64                  secretKeyRef:
    65                    key: AWS_SECRET_ACCESS_KEY
    66                    name: minio-secret
    67              - name: DEFAULT_REGION
    68                value: us-east-1
    69              - name: ENDPOINT
    70                value: http://minio-service.namespace:9000/
    71              - name: S3_BUCKET
    72                value: operator-testing
    73            imagePullPolicy: Always
    74            name: xtrabackup
    75            resources: {}
    76            securityContext:
    77              privileged: true
    78            terminationMessagePath: /dev/termination-log
    79            terminationMessagePolicy: File
    80            volumeMounts:
    81              - mountPath: /etc/mysql/ssl
    82                name: ssl
    83              - mountPath: /etc/mysql/ssl-internal
    84                name: ssl-internal
    85              - mountPath: /etc/mysql/vault-keyring-secret
    86                name: vault-keyring-secret
    87        dnsPolicy: ClusterFirst
    88        restartPolicy: Never
    89        schedulerName: default-scheduler
    90        securityContext:
    91          fsGroup: 1001
    92          supplementalGroups:
    93            - 1001
    94            - 1002
    95            - 1003
    96        serviceAccount: percona-xtradb-cluster-operator-workload
    97        serviceAccountName: percona-xtradb-cluster-operator-workload
    98        terminationGracePeriodSeconds: 30
    99        topologySpreadConstraints:
   100          - labelSelector:
   101              matchLabels:
   102                backup-name: on-demand-backup-s3
   103                cluster: sec-context
   104                job-name: xb-on-demand-backup-s3
   105                type: xtrabackup
   106            maxSkew: 1
   107            topologyKey: kubernetes.io/hostname
   108            whenUnsatisfiable: ScheduleAnyway
   109        volumes:
   110          - name: ssl
   111            secret:
   112              defaultMode: 420
   113              optional: true
   114              secretName: some-name-ssl
   115          - name: ssl-internal
   116            secret:
   117              defaultMode: 420
   118              optional: true
   119              secretName: some-name-ssl-internal
   120          - name: vault-keyring-secret
   121            secret:
   122              defaultMode: 420
   123              optional: true
   124              secretName: sec-context-vault