github.com/percona/percona-xtradb-cluster-operator@v1.14.0/e2e-tests/security-context/compare/job.batch_xb-on-demand-backup-s3.yml (about)

     1  apiVersion: batch/v1
     2  kind: Job
     3  metadata:
     4    annotations:
     5      openshift.io/scc: privileged
     6    generation: 1
     7    labels:
     8      backup-name: on-demand-backup-s3
     9      cluster: sec-context
    10      job-name: xb-on-demand-backup-s3
    11      type: xtrabackup
    12    name: xb-on-demand-backup-s3
    13    ownerReferences:
    14      - controller: true
    15        kind: PerconaXtraDBClusterBackup
    16        name: on-demand-backup-s3
    17  spec:
    18    backoffLimit: 10
    19    completionMode: NonIndexed
    20    completions: 1
    21    manualSelector: true
    22    parallelism: 1
    23    selector:
    24      matchLabels:
    25        backup-name: on-demand-backup-s3
    26        cluster: sec-context
    27        job-name: xb-on-demand-backup-s3
    28        type: xtrabackup
    29    suspend: false
    30    template:
    31      metadata:
    32        annotations:
    33          openshift.io/scc: privileged
    34        labels:
    35          backup-name: on-demand-backup-s3
    36          cluster: sec-context
    37          job-name: xb-on-demand-backup-s3
    38          type: xtrabackup
    39      spec:
    40        containers:
    41          - command:
    42              - bash
    43              - /usr/bin/backup.sh
    44            env:
    45              - name: BACKUP_DIR
    46                value: /backup
    47              - name: PXC_SERVICE
    48                value: sec-context-pxc
    49              - name: PXC_PASS
    50                valueFrom:
    51                  secretKeyRef:
    52                    key: xtrabackup
    53                    name: my-cluster-secrets
    54              - name: VERIFY_TLS
    55                value: "true"
    56              - name: ACCESS_KEY_ID
    57                valueFrom:
    58                  secretKeyRef:
    59                    key: AWS_ACCESS_KEY_ID
    60                    name: minio-secret
    61              - name: SECRET_ACCESS_KEY
    62                valueFrom:
    63                  secretKeyRef:
    64                    key: AWS_SECRET_ACCESS_KEY
    65                    name: minio-secret
    66              - name: DEFAULT_REGION
    67                value: us-east-1
    68              - name: ENDPOINT
    69                value: http://minio-service.namespace:9000/
    70              - name: S3_BUCKET
    71                value: operator-testing
    72            imagePullPolicy: Always
    73            name: xtrabackup
    74            resources: {}
    75            securityContext:
    76              privileged: true
    77            terminationMessagePath: /dev/termination-log
    78            terminationMessagePolicy: File
    79            volumeMounts:
    80              - mountPath: /etc/mysql/ssl
    81                name: ssl
    82              - mountPath: /etc/mysql/ssl-internal
    83                name: ssl-internal
    84              - mountPath: /etc/mysql/vault-keyring-secret
    85                name: vault-keyring-secret
    86        dnsPolicy: ClusterFirst
    87        restartPolicy: Never
    88        schedulerName: default-scheduler
    89        securityContext:
    90          fsGroup: 1001
    91          supplementalGroups:
    92            - 1001
    93            - 1002
    94            - 1003
    95        serviceAccount: percona-xtradb-cluster-operator-workload
    96        serviceAccountName: percona-xtradb-cluster-operator-workload
    97        terminationGracePeriodSeconds: 30
    98        topologySpreadConstraints:
    99          - labelSelector:
   100              matchLabels:
   101                backup-name: on-demand-backup-s3
   102                cluster: sec-context
   103                job-name: xb-on-demand-backup-s3
   104                type: xtrabackup
   105            maxSkew: 1
   106            topologyKey: kubernetes.io/hostname
   107            whenUnsatisfiable: ScheduleAnyway
   108        volumes:
   109          - name: ssl
   110            secret:
   111              defaultMode: 420
   112              optional: true
   113              secretName: some-name-ssl
   114          - name: ssl-internal
   115            secret:
   116              defaultMode: 420
   117              optional: true
   118              secretName: some-name-ssl-internal
   119          - name: vault-keyring-secret
   120            secret:
   121              defaultMode: 420
   122              optional: true
   123              secretName: sec-context-vault