Dockerfile

FROM mdnwebdocs/mdn-admin:2f6c560

ENV AWS_ACCESS_KEY_ID setme
ENV AWS_SECRET_ACCESS_KEY setme

RUN mkdir -p /mdn /data

RUN groupadd --gid 1000 kuma
RUN useradd -ms /bin/bash --uid 1000 --gid 1000 kuma
USER kuma:kuma

WORKDIR /mdnsync
ADD mozmeao-sync /mdn/mozmeao-sync

CMD [ "/mdn/mozmeao-sync" ]

migration-deploy.yaml

---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: migration-sync-test
  namespace: mdn-prod
spec:
  replicas: 1
  template:
    metadata:
      labels:
        app: migration-sync-test
    spec:
      containers:
        - name: migration-sync-test
          image: limed/mdn-migration-sync:affdb8f
          command: [ "/bin/bash", "-c", "--" ]
          args: [ "while true; do sleep 30; done;" ]
          volumeMounts:
            - mountPath: /data
              name: migration-sync
          env:
            - name: AWS_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: migration-sync
                  key: access_key
            - name: AWS_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: migration-sync
                  key: secret_key
      volumes:
        - name: migration-sync
          persistentVolumeClaim:
            claimName: mdn-shared

migration.yaml

apiVersion: batch/v1beta1
kind: CronJob
metadata:
  name: migration-sync
  namespace: mdn-prod
spec:
  schedule: "0 2 * * *"
  concurrencyPolicy: Forbid
  failedJobsHistoryLimit: 3
  successfulJobsHistoryLimit: 3
  jobTemplate:
    spec:
      template:
        spec:
          restartPolicy: OnFailure
          containers:
            - name: migration-sync
              image: limed/mdn-migration-sync:affdb8f
              imagePullPolicy: IfNotPresent
              volumeMounts:
                - mountPath: /data/
                  name: migration-sync
              env:
                - name: AWS_ACCESS_KEY_ID
                  valueFrom:
                    secretKeyRef:
                      name: migration-sync
                      key: access_key
                - name: AWS_SECRET_ACCESS_KEY
                  valueFrom:
                    secretKeyRef:
                      name: migration-sync
                      key: secret_key
          volumes:
            - name: migration-sync
              persistentVolumeClaim:
                claimName: mdn-shared

migration-deploy.yaml is for testing purposes only