apiVersion: batch/v1
kind: CronJob
metadata:
  name: reddit-intel-backup
  namespace: backup-system
spec:
  # Único CronJob de backup que corre en n97: /opt/reddit-intel vive fuera de k3s
  # (Docker en el host) y su cron local escribe en el mismo disco.
  schedule: "15 3 * * *"
  concurrencyPolicy: Forbid
  failedJobsHistoryLimit: 2
  successfulJobsHistoryLimit: 3
  jobTemplate:
    spec:
      backoffLimit: 1
      activeDeadlineSeconds: 1800
      template:
        spec:
          nodeSelector:
            kubernetes.io/hostname: chemavx-n97
          restartPolicy: Never
          securityContext:
            runAsUser: 0
          containers:
            - name: rclone
              # OJO: imagen BusyBox — el script debe evitar GNU-ismos
              image: docker.io/rclone/rclone:1.74.3
              command: ["/bin/sh", "/scripts/reddit-intel.sh"]
              resources:
                requests:
                  cpu: 50m
                  memory: 64Mi
                limits:
                  cpu: 200m
                  memory: 256Mi
              volumeMounts:
                - mountPath: /opt/reddit-intel
                  name: reddit-intel
                  readOnly: true
                - mountPath: /rclone
                  name: rclone-conf
                - mountPath: /scripts
                  name: scripts
          volumes:
            - name: reddit-intel
              hostPath:
                path: /opt/reddit-intel
                type: Directory
            - name: rclone-conf
              secret:
                secretName: rclone-conf-infisical
                items:
                  - key: RCLONE_CONF
                    path: rclone.conf
            - name: scripts
              configMap:
                name: backup-scripts
                defaultMode: 0755