apiVersion: batch/v1
kind: CronJob
metadata:
  name: hydra-janitor
  labels:
    app.kubernetes.io/name: hydra-janitor
spec:
  concurrencyPolicy: Forbid
  schedule: "0 */1 * * *"
  jobTemplate:
    spec:
      template:
        metadata:
          labels:
            app.kubernetes.io/name: hydra-janitor
        spec:
          restartPolicy: OnFailure
          serviceAccountName: hydra-sa
          containers:
            - name: janitor
              image: reg.cadoles.com/proxy_cache/oryd/hydra:v2.0.3
              envFrom:
              - configMapRef:
                  name: hydra-env
              imagePullPolicy: IfNotPresent
              command: ["hydra"]
              env: []
              args:
                - janitor
                - --read-from-env
                - --grants
                - --requests
                - --tokens
              resources: {}