64 lines
1.8 KiB
YAML
64 lines
1.8 KiB
YAML
#apiVersion: batch/v1
|
|
#kind: CronJob
|
|
#metadata:
|
|
# name: sync-dataprotection-keys
|
|
# namespace: redis
|
|
#spec:
|
|
# schedule: "0 12 14 * *" # at noon the 14th of every month
|
|
# jobTemplate:
|
|
# spec:
|
|
# template:
|
|
# spec:
|
|
# containers:
|
|
# - name: sync
|
|
# image: redis
|
|
# command: [ "/bin/sh", "/script/sync.sh" ]
|
|
# env:
|
|
# - name: PROD_REDIS_PASSWORD
|
|
# valueFrom:
|
|
# secretKeyRef:
|
|
# name: prod-redis
|
|
# key: redis-password
|
|
# - name: STAGING_REDIS_PASSWORD
|
|
# valueFrom:
|
|
# secretKeyRef:
|
|
# name: staging-redis
|
|
# key: redis-password
|
|
# volumeMounts:
|
|
# - name: script
|
|
# mountPath: /script
|
|
# securityContext:
|
|
# allowPrivilegeEscalation: false
|
|
# capabilities:
|
|
# drop:
|
|
# - ALL
|
|
# readOnlyRootFilesystem: false
|
|
# runAsGroup: 0
|
|
# runAsNonRoot: true
|
|
# runAsUser: 1001
|
|
# seccompProfile:
|
|
# type: RuntimeDefault
|
|
# securityContext:
|
|
# fsGroup: 1001
|
|
# fsGroupChangePolicy: Always
|
|
# volumes:
|
|
# - name: script
|
|
# configMap:
|
|
# name: sync-dataprotection-keys-script
|
|
# defaultMode: 0500
|
|
# restartPolicy: Never
|
|
# backoffLimit: 4
|
|
#---
|
|
#apiVersion: v1
|
|
#kind: ConfigMap
|
|
#metadata:
|
|
# name: sync-dataprotection-keys-script
|
|
# namespace: redis
|
|
#data:
|
|
# sync.sh: |-
|
|
# #!/bin/sh
|
|
# redis-cli -h prod-redis-master -a $PROD_REDIS_PASSWORD -D "" --raw dump DataProtection-Keys |\
|
|
# redis-cli -h staging-redis-master -a $STAGING_REDIS_PASSWORD -X keys restore DataProtection-Keys 0 keys replace
|
|
|
|
|