introduced control parameter for cronjob

template/stacks/forgejo/forgejo-server/manifests/forgejo-s3-backup-cronjob.yaml

@@ -5,50 +5,58 @@ metadata:
   namespace: gitea
 spec:
   schedule: "0 1 * * *"
+  concurrencyPolicy: "Forbid"
+  successfulJobsHistoryLimit: 5
+  failedJobsHistoryLimit: 5
+  startingDeadlineSeconds: 600 # 10 minutes
   jobTemplate:
     spec:
+      # 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer
+      activeDeadlineSeconds: 1350
+      backoffLimit: 2
+      ttlSecondsAfterFinished: 259200 #
       template:
         spec:
           containers:
-          - name: rclone
+            - name: rclone
-            image: rclone/rclone:1.70
+              image: rclone/rclone:1.70
-            imagePullPolicy: IfNotPresent
+              imagePullPolicy: IfNotPresent
-            env:
+              env:
-            - name: SOURCE_BUCKET
+                - name: SOURCE_BUCKET
-              valueFrom:
+                  valueFrom:
-                secretKeyRef:
+                    secretKeyRef:
-                  name: forgejo-cloud-credentials
+                      name: forgejo-cloud-credentials
-                  key: bucket-name
+                      key: bucket-name
-            - name: AWS_ACCESS_KEY_ID
+                - name: AWS_ACCESS_KEY_ID
-              valueFrom:
+                  valueFrom:
-                secretKeyRef:
+                    secretKeyRef:
-                  name: forgejo-cloud-credentials
+                      name: forgejo-cloud-credentials
-                  key: access-key
+                      key: access-key
-            - name: AWS_SECRET_ACCESS_KEY
+                - name: AWS_SECRET_ACCESS_KEY
-              valueFrom:
+                  valueFrom:
-                secretKeyRef:
+                    secretKeyRef:
-                  name: forgejo-cloud-credentials
+                      name: forgejo-cloud-credentials
-                  key: secret-key
+                      key: secret-key
-            volumeMounts:
+              volumeMounts:
-            - name: rclone-config
+                - name: rclone-config
-              mountPath: /config/rclone
+                  mountPath: /config/rclone
-              readOnly: true
+                  readOnly: true
-            - name: backup-dir
+                - name: backup-dir
-              mountPath: /backup
+                  mountPath: /backup
-              readOnly: false
+                  readOnly: false
-            command:
+              command:
-            - /bin/sh
+                - /bin/sh
-            - -c
+                - -c
-            - |
+                - |
-              rclone sync source:/${SOURCE_BUCKET} /backup -v --ignore-checksum
+                  rclone sync source:/${SOURCE_BUCKET} /backup -v --ignore-checksum
           restartPolicy: OnFailure
           volumes:
-          - name: rclone-config
+            - name: rclone-config
-            secret:
+              secret:
-              secretName: forgejo-s3-backup
+                secretName: forgejo-s3-backup
-          - name: backup-dir
+            - name: backup-dir
-            persistentVolumeClaim:
+              persistentVolumeClaim:
-              claimName: s3-backup
+                claimName: s3-backup
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -57,7 +65,7 @@ metadata:
   namespace: gitea
   annotations:
     everest.io/disk-volume-type: SATA
-    everest.io/crypt-key-id: {{{ .Env.PVC_KMS_KEY_ID }}}
+    everest.io/crypt-key-id: { { { .Env.PVC_KMS_KEY_ID } } }
 spec:
   storageClassName: csi-disk
   accessModes: