f4ffde89d0
The K8s CronJob that manages CRL syncing often leaves pods hanging around for days at a time. This appears to happen when the download of a particular CRL from DISA hangs for whatever reason. This updates the configuration so that a running cronjob is automatically replaced by its successor, rather than the two running concurrently. (The CRL CronJob runs every hour, and it one has taken that long then it's hanging and needs to be replace.) Similarly, this updates the config to only retain one successful CRL pod, rather than the default of three.
46 lines
1.2 KiB
YAML
46 lines
1.2 KiB
YAML
apiVersion: batch/v1beta1
|
|
kind: CronJob
|
|
metadata:
|
|
name: crls
|
|
namespace: atat
|
|
spec:
|
|
schedule: "0 * * * *"
|
|
concurrencyPolicy: Replace
|
|
successfulJobsHistoryLimit: 1
|
|
jobTemplate:
|
|
spec:
|
|
template:
|
|
spec:
|
|
restartPolicy: OnFailure
|
|
containers:
|
|
- name: crls
|
|
image: $CONTAINER_IMAGE
|
|
command: [
|
|
"/bin/sh", "-c"
|
|
]
|
|
args: [
|
|
"/opt/atat/atst/script/sync-crls",
|
|
]
|
|
envFrom:
|
|
- configMapRef:
|
|
name: atst-envvars
|
|
- configMapRef:
|
|
name: atst-worker-envvars
|
|
volumeMounts:
|
|
- name: atst-config
|
|
mountPath: "/opt/atat/atst/atst-overrides.ini"
|
|
subPath: atst-overrides.ini
|
|
- name: crls-vol
|
|
mountPath: "/opt/atat/atst/crls"
|
|
volumes:
|
|
- name: atst-config
|
|
secret:
|
|
secretName: atst-config-ini
|
|
items:
|
|
- key: override.ini
|
|
path: atst-overrides.ini
|
|
mode: 0644
|
|
- name: crls-vol
|
|
persistentVolumeClaim:
|
|
claimName: crls-vol-claim
|