apiVersion: batch/v1
kind: Job
metadata:
  name: keycloak-db-secret-sync
  namespace: keycloak
spec:
  backoffLimit: 2
  template:
    spec:
      serviceAccountName: keycloak-bootstrap
      restartPolicy: OnFailure
      volumes:
        - name: sync
          configMap:
            name: keycloak-db-secret-sync
            defaultMode: 493
      containers:
        - name: sync
          image: registry.k8s.io/kubectl:v1.31.0
          command:
            - /bin/sh
            - -ec
            - /sync/sync.sh
          volumeMounts:
            - name: sync
              mountPath: /sync