k8s 定时任务

apiVersion: v1
kind: ServiceAccount
metadata:
  name: crontab-sa
  namespace: uen
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: crontab-role
  namespace: uen
rules:
- apiGroups: [""]
  resources: ["pods", "deployments"]
  verbs: ["get", "list", "watch", "update", "patch"]
- apiGroups: ["apps"]
  resources: ["deployments"]
  verbs: ["get", "list", "watch", "update", "patch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: crontab-role-binding
  namespace: uen
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: crontab-role
subjects:
- kind: ServiceAccount
  name: crontab-sa
  namespace: uen

---
apiVersion: batch/v1
kind: CronJob
metadata:
  name: mpos-ams-service-autorestart
  namespace: uen
spec:
  schedule: "*/2 * * * *"
  jobTemplate:
    spec:
      template:
        spec:
          serviceAccountName: crontab-sa
          containers:
          - name: mpos-ams-service-restart
            image: harbor.uenpay.com/base/kubectl
            #image: bitnami/kubectl
            command: ["/bin/sh", "-c"]
            args:
            - kubectl -n uen rollout restart deploy mpos-ams-service
          restartPolicy: OnFailure