sheriff-emails.yaml

apiVersion: batch/v1beta1
kind: CronJob
metadata:
  labels:
    app: sheriff-emails
  name: sheriff-emails
spec:
  schedule: "0 13 * * 5"
  jobTemplate:
    metadata:
      labels:
        app: sheriff-emails
    spec:
      template:
        spec:
          restartPolicy: Never
          automountServiceAccountToken: false
          securityContext:
            runAsUser: 2000 # aka skia
            fsGroup: 2000   # aka skia
          containers:
            - name: sheriff-emails
              image: gcr.io/skia-public/sheriff_emails:2018-10-04T17_32_58Z-rmistry-d8a33ad-clean
              args:
                - "--logtostderr"
                - "--email_client_secret_file=/etc/sheriff-email-secrets/client_secret.json"
                - "--email_token_cache_file=/etc/sheriff-email-secrets/client_token.json"
              ports:
                - containerPort: 20000
                - containerPort:  8000
              volumeMounts:
                - name: sheriff-email-secrets
                  mountPath: /etc/sheriff-email-secrets
                - name: skia-sheriff-emails-sa
                  mountPath: /var/secrets/google
              env:
                - name: GOOGLE_APPLICATION_CREDENTIALS
                  value: /var/secrets/google/key.json
              resources:
                requests:
                  memory: "10Mi"
                  cpu: "10m"
          volumes:
            - name: sheriff-email-secrets
              secret:
                secretName: sheriff-email-secrets
            - name: skia-public-auth
              secret:
                secretName: skia-public-auth
            - name: skia-sheriff-emails-sa
              secret:
                secretName: skia-sheriff-emails
            - name: skia-org-legacy-login-secrets
              secret:
                secretName: skia-org-legacy-login-secrets