---
apiVersion: batch/v1
kind: Job
metadata:
  name: "list-${rsrc}-${ts}"
  namespace: "${namespace}"
spec:
  ttlSecondsAfterFinished: 3600
  template:
    spec:
      automountServiceAccountToken: false
      restartPolicy: OnFailure
      containers:
        - name: list
          image: docker.io/restic/restic:0.16.0
          args: ["snapshots"]
          envFrom:
            - secretRef:
                name: "${rsrc}-restic-secret"