🐛 qbittorrent job

cluster/apps/downloaders/qbittorrent-jobs/cron-job.yaml

@@ -12,6 +12,7 @@ spec:
         metadata:
           name: qbittorrent-upgrade-p2pblocklist
         spec:
+          serviceAccountName: jobs
           containers:
             - name: qbittorrent-upgrade-p2pblocklist
               image: ghcr.io/auricom/kubectl:v1.25.0@sha256:ee2a4883c68adf439fe76a8102261a29cdff34c427822a08bafe264d8dbd09be
@@ -30,7 +31,7 @@ spec:
                   result=$(kubectl get pod --selector app.kubernetes.io/name=qbittorrent --output custom-columns=:metadata.name --namespace default)
                   QBITTORRENT_POD=$(echo $result | awk '{ print $NF }')
                   echo $QBITTORRENT_POD | grep qbittorrent
-                  test $? -eq 0 && kubectl cp /tmp/ipfilter.dat media/$QBITTORRENT_POD:/config/ipfilter.dat
+                  test $? -eq 0 && kubectl cp /tmp/ipfilter.dat default/$QBITTORRENT_POD:/config/ipfilter.dat
                   curl -m 10 --retry 5 http://healthchecks.monitoring.svc.cluster.local.:8000/ping/b4651e4f-5058-436b-a237-0df660e9de9e
                   kubectl rollout restart deployment qbittorrent --namespace default
           restartPolicy: Never

cluster/apps/kube-tools/kustomization.yaml

@@ -11,6 +11,7 @@ resources:
   - kyverno
   - metrics-server
   - node-feature-discovery
+  - rbac
   - reloader
   - system-upgrade
   - vpa

cluster/apps/kube-tools/rbac/jobs.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: jobs
+  namespace: default
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: jobs-edit
+  namespace: default
+subjects:
+  - kind: ServiceAccount
+    name: jobs
+roleRef:
+  kind: ClusterRole
+  name: edit
+  apiGroup: rbac.authorization.k8s.io

cluster/apps/kube-tools/rbac/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - jobs.yaml