feat: add secret regcred

cluster/apps/development/gitea/.decrypted.backup-job.yaml

@@ -0,0 +1,47 @@
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: gitea-repositories-backup
+  namespace: development
+spec:
+  schedule: "@weekly"
+  jobTemplate:
+    spec:
+      template:
+        metadata:
+          name: gitea-repositories-backup
+        spec:
+          imagePullSecrets:
+            - name: regcred
+          containers:
+            - name: trash-updater
+              image: bitnami/kubectl:1.21.3
+              imagePullPolicy: IfNotPresent
+              command:
+                - "bin/sh"
+                - "-ec"
+                - |
+                  #!/bin/sh
+
+                  set -o nounset
+                  set -o errexit
+
+                  DATE=`date +%Y%m%d`
+                  ARCHIVE_NAME=gitea-repositories-${DATE}.tar
+
+                  kubectl exec gitea-0 --namespace development -- bash -c "\
+                    cd /data/git/gitea-repositories && \
+                    tar cvf /tmp/${ARCHIVE_NAME} ./ && \
+                    zstd /tmp/${ARCHIVE_NAME} && \
+                    scp -i /opt/id_rsa /tmp/${ARCHIVE_NAME}.zst homelab@truenas:/mnt/storage/backups/gitea/ && \
+                    rm /tmp/${ARCHIVE_NAME}.zst"
+              volumeMounts:
+                - name: secret
+                  mountPath: /opt/id_rsa
+                  subPath: deployment-rsa-priv-key
+          volumes:
+            - name: secret
+              secret:
+                secretName: drone-pipelines
+          restartPolicy: Never

cluster/apps/development/jobs/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - serviceaccount.yaml

cluster/apps/development/jobs/serviceaccount.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: jobs
+  namespace: development
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: jobs-edit
+  namespace: development
+subjects:
+  - kind: ServiceAccount
+    name: jobs
+roleRef:
+  kind: ClusterRole
+  name: edit
+  apiGroup: rbac.authorization.k8s.io

cluster/apps/development/kustomization.yaml

@@ -5,3 +5,4 @@ resources:
   - drone
   - drone-runner-kube
   - gitea
+  - jobs