---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  namespace: nightly
  name: alerts
rules:
  - apiGroups: [""]
    resources: ["pods","secrets", "namespaces"]
    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
  - apiGroups: ["pingcap.com"]
    resources: ["tidbclusters"]
    verbs: ["*"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: alerts
  namespace: nightly
subjects:
  - kind: ServiceAccount
    name: alerts
    namespace: nightly
roleRef:
  kind: Role
  name: alerts
  apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: alerts
  namespace: nightly
rules:
  - apiGroups: [""]
    resources: ["pods","secrets", "namespaces"]
    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
  - apiGroups: ["pingcap.com"]
    resources: ["tidbclusters"]
    verbs: ["*"]
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: alerts
  annotations:
    rbac.authorization.kubernetes.io/autoupdate: "true"
roleRef:
  kind: ClusterRole
  name: cluster-admin
  apiGroup: rbac.authorization.k8s.io
subjects:
  - kind: ServiceAccount
    name: alerts
    namespace: nightly

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: alerts
  namespace: nightly
---
apiVersion: batch/v1beta1
kind: CronJob
metadata:
  name: dev-tidb-alerts
  namespace: nightly
spec:
  schedule: "0 0,2,4,12,14,15 * * 1-6"
  jobTemplate:
    spec:
      template:
        spec:
          serviceAccountName: alerts
          containers:
            - name: alerts
              image:  knightxun/dev-alerts:v2
              imagePullPolicy: Always
              args: ['/usr/bin/python3', 'alerts.py']
              env:
                - name: passwd
                  value: sTLCdjxgGcPsW8u
          restartPolicy: OnFailure