apiVersion: batch/v1
kind: CronJob
metadata:
  name: etcd-defrag-defrag-2
  labels:
    app.kubernetes.io/controller: defrag-2
    app.kubernetes.io/instance: talos
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: talos
    helm.sh/chart: etcd-defrag-4.6.2
  namespace: talos
spec:
  suspend: false
  concurrencyPolicy: Forbid
  startingDeadlineSeconds: 30
  timeZone: America/Chicago
  schedule: "10 0 * * 0"
  successfulJobsHistoryLimit: 1
  failedJobsHistoryLimit: 1
  jobTemplate:
    spec:
      parallelism: 1
      backoffLimit: 3
      template:
        metadata:
          labels:
            app.kubernetes.io/controller: defrag-2
            app.kubernetes.io/instance: talos
            app.kubernetes.io/name: talos
        spec:
          enableServiceLinks: false
          serviceAccountName: default
          automountServiceAccountToken: true
          hostIPC: false
          hostNetwork: false
          hostPID: false
          dnsPolicy: ClusterFirst
          restartPolicy: Never
          nodeSelector:
            node-role.kubernetes.io/control-plane: ""
          tolerations:
            - effect: NoSchedule
              key: node-role.kubernetes.io/control-plane
              operator: Exists
          containers:
            - args:
                - etcd
                - defrag
                - -n
                - 10.232.1.12
              env:
                - name: TALOSCONFIG
                  value: /tmp/.talos/config
              image: ghcr.io/siderolabs/talosctl:v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
              name: main
              volumeMounts:
                - mountPath: /tmp/.talos/config
                  mountPropagation: None
                  name: talos-config-2
                  readOnly: true
                  subPath: config
          volumes:
            - name: talos-config-2
              secret:
                secretName: talos-etcd-defrag-secret