apiVersion: batch/v1beta1
kind: CronJob
metadata:
  name: credentials-sync
  namespace: flux-system
spec:
  jobTemplate:
    spec:
      template:
        spec:
          containers:
          - name: sync
            image: gcr.io/google.com/cloudsdktool/cloud-sdk:alpine
            env:
            - name: RECONCILE_SH
              value: |-
                reconcile() {
                  echo "Starting GCR token sync -- $(date)"
                  echo "Logging into ECR: ${ECR_REGION} -- ${ECR_REGISTRY}"
                  token="$(gcloud auth print-access-token)"
                  user="oauth2accesstoken "
                  server="${GCR_REGISTRY}"

                  echo "Creating secret: ${KUBE_SECRET}"
                  apply-secret "${KUBE_SECRET}" "${token}" "${user}" "${server}"

                  echo "Finished GCR token sync -- $(date)"
                  echo
                }