apiVersion: batch/v1
kind: CronJob
metadata:
  name: o11ycost-cronjob
  namespace: o11ycost
spec:
  schedule: "0 0 3 * *"
  jobTemplate:
    spec:
      template:
        spec:
          restartPolicy: Never
          serviceAccountName: o11ycost-sa
          containers:
          - name: o11ycost-container
            image: 557537366020.dkr.ecr.us-west-2.amazonaws.com/o11y_cloud_cost:v3
            imagePullPolicy: Always
            args: ["length=1", "config=./config.yaml"]
            env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: "/clientLibraryConfig.json"
            - name: ALIBABA_CLOUD_ROLE_ARN
              value: acs:ram::5480039859161595:role/o11ycost-role
            - name: ALIBABA_CLOUD_OIDC_PROVIDER_ARN
              value: acs:ram::5480039859161595:oidc-provider/o11y-global-server
            - name: ALIBABA_CLOUD_OIDC_TOKEN_FILE
              value: /var/run/secrets/ack-token/ack-token
            volumeMounts:
            - name: config-volume
              mountPath: /config.yaml
              subPath: config.yaml
            - mountPath: /var/run/secrets/ack-token
              name: ack-token
          volumes:
          - name: config-volume
            configMap:
              name: o11ycost-config
              items:
              - key: "config.yaml"
                path: "config.yaml"
          - name: ack-token
            projected:
              sources:
              - serviceAccountToken:
                  audience: observability
                  expirationSeconds: 7200
                  path: ack-token