CronJob

This declares one CronJob to be managed by Inrun.

Example:

onCreate:
  cronJobs:
    - name: "{{ .metadata.name }}-sync"
      schedule: "{{ .spec.syncSchedule }}"
      image: "{{ .spec.syncImage }}"
      command: ["sh", "-c", "sync.sh"]

Lifecycle

Declare this resource under onCreate for an idempotent, one-time create: Inrun creates it on the first reconcile and leaves it untouched afterward. Set reconcile: true on the same entry to also apply it as drift correction on every subsequent reconcile. This is a shorthand for declaring the identical entry under onReconcile as well — there’s no need to do both.

Declare a resource under onDelete to run explicit cleanup before the CR’s finalizer is removed. Most resources need no onDelete entry — they are garbage-collected automatically through owner references when the CR itself is deleted.

Fields

name

Type: string

Name — CronJob name. Default when omitted: “{{ .metadata.name }}-cronjob”

schedule

Type: string

Schedule — cron schedule expression. Required. Static: “0 * * * *” (every hour) Dynamic: “{{ .spec.schedule }}”

image

Type: string

Image — container image. Required.

imagePullSecrets

Type: list

ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use.

command

Type: list

Command — container entrypoint. Each element supports template expressions.

args

Type: list

Args — container arguments. Each element supports template expressions.

namespace

Type: string

Namespace — target namespace. Default when omitted: “{{ .metadata.namespace }}”

labels

Type: map

Labels — applied to CronJob metadata. Values support template expressions.

nodeSelector

Type: map

NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node’s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ +optional +mapType=atomic

serviceAccountName

Type: string

ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ +optional

restartPolicy

Type: string

RestartPolicy — OnFailure (default) or Never. With Never, each retry starts a new pod and the failed pods are kept, logs included. Supports template expressions.

reconcile

Type: boolean

Reconcile: true — also apply this declaration as drift correction on every reconcile. Equivalent to declaring the same entry under both onCreate and onReconcile. When false (default), only runs on onCreate (idempotent create).

when

Type: list

When lists conditions that must all pass for this entry to be written; see Condition. When an entry kept in sync (onReconcile, or reconcile: true) stops passing, the object it wrote is removed.

suspend

Type: string

Suspend — when “true”, the schedule stops firing new Jobs; existing runs are unaffected. Accepts a template expression. Default: “false”.

successfulJobsHistoryLimit

Type: string

SuccessfulJobsHistoryLimit — number of completed, successful Jobs to keep around for inspection. Default: 3.

failedJobsHistoryLimit

Type: string

FailedJobsHistoryLimit — number of failed Jobs to keep around for inspection. Default: 1.

concurrencyPolicy

Type: string

ConcurrencyPolicy — how to handle a scheduled run that overlaps with a still-running previous Job. Accepted values: allow (default — runs concurrently), forbid (skip the new run), replace (cancel the running Job and start the new one).

startingDeadlineSeconds

Type: string

StartingDeadlineSeconds — if a scheduled run is missed (e.g. the controller was down) by more than this many seconds, it is counted as failed instead of started late. Omit for no deadline.

resources

Type: object

Resources — CPU and memory requests/limits for the container. Set resources.preset for a named preset, or resources.requests/limits for explicit values. Preset and explicit values are mutually exclusive.

resources:
  preset: burst

forEach

Type: object

ForEach declares dynamic expansion over a list field. When set, one source declaration becomes N declarations — one per list element. .item and .<as> are available in template expressions within this declaration.

forEach:
  field: spec.regions
  as: region

or

Type: list

Or lists conditions of which at least one must pass, alongside When.

securityContext

Type: object

SecurityContext — container-level security settings. Set securityContext.preset for a named preset (baseline, restricted, hardened) or declare individual fields. Preset and explicit fields are mutually exclusive.

securityContext:
  preset: restricted

podSecurity

Type: object

PodSecurity — pod-level security settings applied to the pod spec. Set podSecurity.preset for a named preset or declare individual fields.

podSecurity:
  preset: baseline

containers

Type: list

Containers — the pod’s containers, when it runs more than one. With containers set, image, command, args and resources move into each container, and this entry’s securityContext becomes a default every container inherits. See Container.

initContainers

Type: list

InitContainers — run in order, each to completion, before the containers start. See Container.

forceConflict

Type: boolean

ForceConflict, when true, sets Force: true when applying this resource, taking ownership of conflicting fields instead of returning a conflict error. Overrides the CRD-level ForceConflict setting.

Quick reference