apiVersion: batch/v1
kind: CronJob
metadata:
  name: backup
  namespace: rain-hub
spec:
  schedule: "0 3 * * *"
  concurrencyPolicy: Forbid
  jobTemplate:
    spec:
      template:
        spec:
          restartPolicy: OnFailure
          containers:
            - name: backup
              image: rain-hub-backup:latest
              imagePullPolicy: Never
              envFrom:
                - secretRef:
                    name: rain-hub-secrets
              volumeMounts:
                - name: ssh-key
                  mountPath: /ssh
                  readOnly: true
          volumes:
            - name: ssh-key
              secret:
                secretName: backup-ssh-key
                defaultMode: 0400