apiVersion: batch/v1
kind: CronJob
metadata:
  name: rclone-directus-assets
  labels:
    app.kubernetes.io/controller: directus-assets
    app.kubernetes.io/instance: rclone
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: rclone
    helm.sh/chart: rclone-4.6.2
  namespace: rclone
spec:
  suspend: false
  concurrencyPolicy: Forbid
  startingDeadlineSeconds: 90
  timeZone: US/Central
  schedule: "0 0 6 * *"
  successfulJobsHistoryLimit: 1
  failedJobsHistoryLimit: 1
  jobTemplate:
    spec:
      parallelism: 1
      backoffLimit: 3
      template:
        metadata:
          labels:
            app.kubernetes.io/controller: directus-assets
            app.kubernetes.io/instance: rclone
            app.kubernetes.io/name: rclone
        spec:
          enableServiceLinks: false
          serviceAccountName: default
          automountServiceAccountToken: true
          hostIPC: false
          hostNetwork: false
          hostPID: false
          dnsPolicy: ClusterFirst
          restartPolicy: Never
          containers:
            - args:
                - sync
                - src:directus-assets
                - dest:directus-assets
                - --s3-no-check-bucket
                - --verbose
              env:
                - name: RCLONE_S3_PROVIDER
                  value: Other
                - name: RCLONE_CONFIG_SRC_TYPE
                  value: s3
                - name: RCLONE_CONFIG_SRC_PROVIDER
                  value: Other
                - name: RCLONE_CONFIG_SRC_ENV_AUTH
                  value: "false"
                - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_KEY_ID
                      name: garage-directus-secret
                - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_SECRET_KEY
                      name: garage-directus-secret
                - name: RCLONE_CONFIG_SRC_REGION
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_REGION
                      name: garage-directus-secret
                - name: RCLONE_CONFIG_SRC_ENDPOINT
                  valueFrom:
                    secretKeyRef:
                      key: SRC_ENDPOINT
                      name: garage-directus-secret
                - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
                  value: "true"
                - name: RCLONE_CONFIG_DEST_TYPE
                  value: s3
                - name: RCLONE_CONFIG_DEST_PROVIDER
                  value: Other
                - name: RCLONE_CONFIG_DEST_ENV_AUTH
                  value: "false"
                - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_KEY_ID
                      name: garage-directus-secret
                - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_SECRET_KEY
                      name: garage-directus-secret
                - name: RCLONE_CONFIG_DEST_REGION
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_REGION
                      name: garage-directus-secret
                - name: RCLONE_CONFIG_DEST_ENDPOINT
                  valueFrom:
                    secretKeyRef:
                      key: DEST_ENDPOINT
                      name: garage-directus-secret
                - name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE
                  value: "true"
              image: rclone/rclone:1.73.2
              imagePullPolicy: IfNotPresent
              name: sync