Packaged invoice container into Kubernetes cronjob

The manifests needed for the cronjob includes the cronjob, and two secret files which sets the private key for the nonbillable repo's deploykey and the s3 app_key and key_id
The cronjob is set to run at 12:00AM on the 1st of each month

k8/base/cronjob.yaml

@@ -0,0 +1,30 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: hello
+spec:
+  schedule: "0 12 1 * *"
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+          - name: cronjob
+            image: ghcr.io/cci-moc/process-csv-report:latest
+            env:
+              - name: GH_NONBILLABLE_DEPLOYKEY
+                valueFrom:
+                secretKeyRef:
+                  name: gh-nonbillables
+                  key: ssh-deploykey
+              - name: S3_KEY_ID
+                valueFrom:
+                secretKeyRef:
+                  name: nerc-invoices-s3-bucket
+                  key: s3-key-id
+              - name: S3_APP_KEY
+                valueFrom:
+                secretKeyRef:
+                  name: nerc-invoices-s3-bucket
+                  key: s3-app-key
+          restartPolicy: OnFailure

k8/base/kustomization.yaml

@@ -0,0 +1,2 @@
+resources:
+  - cronjob.yaml

k8/overlay/gh-nonbillables.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gh-nonbillables
+type: kubernetes.io/ssh-auth
+data:
+  ssh-deploykey: test

k8/overlay/kustomization.yaml

@@ -0,0 +1,4 @@
+resources:
+  - ../base
+  - secret-b2-old-pi.yaml
+  - secret-gh-nonbillables.yaml

k8/overlay/nerc-invoices-s3-bucket.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: nerc-invoices-s3-bucket
+type: Opaque
+data:
+  s3-app-key: test
+  s3-key-id: test