From 3277d6d8544df1f9eccd9267bf0affcd96709632 Mon Sep 17 00:00:00 2001
From: Manuel Ganter <manuel.ganter@think-ahead.tech>
Date: Tue, 12 Aug 2025 16:16:55 +0200
Subject: [PATCH] introduced control parameter for cronjob

---
 .../manifests/forgejo-s3-backup-cronjob.yaml  | 84 ++++++++++---------
 1 file changed, 46 insertions(+), 38 deletions(-)

diff --git a/template/stacks/forgejo/forgejo-server/manifests/forgejo-s3-backup-cronjob.yaml b/template/stacks/forgejo/forgejo-server/manifests/forgejo-s3-backup-cronjob.yaml
index 7540f87..ea7aaee 100644
--- a/template/stacks/forgejo/forgejo-server/manifests/forgejo-s3-backup-cronjob.yaml
+++ b/template/stacks/forgejo/forgejo-server/manifests/forgejo-s3-backup-cronjob.yaml
@@ -5,50 +5,58 @@ metadata:
   namespace: gitea
 spec:
   schedule: "0 1 * * *"
+  concurrencyPolicy: "Forbid"
+  successfulJobsHistoryLimit: 5
+  failedJobsHistoryLimit: 5
+  startingDeadlineSeconds: 600 # 10 minutes
   jobTemplate:
     spec:
+      # 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer
+      activeDeadlineSeconds: 1350
+      backoffLimit: 2
+      ttlSecondsAfterFinished: 259200 #
       template:
         spec:
           containers:
-          - name: rclone
-            image: rclone/rclone:1.70
-            imagePullPolicy: IfNotPresent
-            env:
-            - name: SOURCE_BUCKET
-              valueFrom:
-                secretKeyRef:
-                  name: forgejo-cloud-credentials
-                  key: bucket-name
-            - name: AWS_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: forgejo-cloud-credentials
-                  key: access-key
-            - name: AWS_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: forgejo-cloud-credentials
-                  key: secret-key
-            volumeMounts:
-            - name: rclone-config
-              mountPath: /config/rclone
-              readOnly: true
-            - name: backup-dir
-              mountPath: /backup
-              readOnly: false
-            command:
-            - /bin/sh
-            - -c
-            - |
-              rclone sync source:/${SOURCE_BUCKET} /backup -v --ignore-checksum
+            - name: rclone
+              image: rclone/rclone:1.70
+              imagePullPolicy: IfNotPresent
+              env:
+                - name: SOURCE_BUCKET
+                  valueFrom:
+                    secretKeyRef:
+                      name: forgejo-cloud-credentials
+                      key: bucket-name
+                - name: AWS_ACCESS_KEY_ID
+                  valueFrom:
+                    secretKeyRef:
+                      name: forgejo-cloud-credentials
+                      key: access-key
+                - name: AWS_SECRET_ACCESS_KEY
+                  valueFrom:
+                    secretKeyRef:
+                      name: forgejo-cloud-credentials
+                      key: secret-key
+              volumeMounts:
+                - name: rclone-config
+                  mountPath: /config/rclone
+                  readOnly: true
+                - name: backup-dir
+                  mountPath: /backup
+                  readOnly: false
+              command:
+                - /bin/sh
+                - -c
+                - |
+                  rclone sync source:/${SOURCE_BUCKET} /backup -v --ignore-checksum
           restartPolicy: OnFailure
           volumes:
-          - name: rclone-config
-            secret:
-              secretName: forgejo-s3-backup
-          - name: backup-dir
-            persistentVolumeClaim:
-              claimName: s3-backup
+            - name: rclone-config
+              secret:
+                secretName: forgejo-s3-backup
+            - name: backup-dir
+              persistentVolumeClaim:
+                claimName: s3-backup
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -57,7 +65,7 @@ metadata:
   namespace: gitea
   annotations:
     everest.io/disk-volume-type: SATA
-    everest.io/crypt-key-id: {{{ .Env.PVC_KMS_KEY_ID }}}
+    everest.io/crypt-key-id: { { { .Env.PVC_KMS_KEY_ID } } }
 spec:
   storageClassName: csi-disk
   accessModes: