Initial commit

helm/tline/templates/job-ensure-bucket.yaml.tpl

@@ -0,0 +1,64 @@
+{{- if and .Values.jobs.ensureBucket.enabled .Values.minio.enabled -}}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ include "tline.componentName" (dict "Values" .Values "Chart" .Chart "Release" .Release "component" "ensure-bucket") }}
+  labels:
+{{ include "tline.labels" . | indent 4 }}
+    app.kubernetes.io/component: ensure-bucket
+  annotations:
+    "helm.sh/hook": pre-install,pre-upgrade
+    "helm.sh/hook-weight": "-20"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+  backoffLimit: 2
+  template:
+    metadata:
+      labels:
+{{ include "tline.selectorLabels" . | indent 8 }}
+        app.kubernetes.io/component: ensure-bucket
+    spec:
+      restartPolicy: Never
+{{ include "tline.imagePullSecrets" . | indent 6 }}
+{{- $aff := include "tline.affinity" (dict "Values" .Values "schedulingClass" .Values.minio.schedulingClass) }}
+{{- if $aff }}
+      affinity:
+{{ $aff | indent 8 }}
+{{- end }}
+{{- $tols := include "tline.tolerations" (dict "Values" .Values "schedulingClass" .Values.minio.schedulingClass) }}
+{{- if $tols }}
+      tolerations:
+{{ $tols | indent 8 }}
+{{- end }}
+      containers:
+        - name: ensure-bucket
+          image: {{ printf "%s:%s" .Values.jobs.ensureBucket.image.repository .Values.jobs.ensureBucket.image.tag | quote }}
+          imagePullPolicy: {{ .Values.jobs.ensureBucket.image.pullPolicy }}
+          command:
+            - sh
+            - -c
+            - |
+              set -eu
+              echo "Configuring mc alias..."
+{{- $minioSvc := include "tline.componentName" (dict "Values" .Values "Chart" .Chart "Release" .Release "component" "minio") -}}
+{{- $minioEndpoint := printf "http://%s:%d" $minioSvc (.Values.minio.service.s3Port | int) -}}
+              mc alias set local {{ $minioEndpoint | quote }} "$MINIO_ACCESS_KEY_ID" "$MINIO_SECRET_ACCESS_KEY"
+
+              echo "Ensuring bucket exists: {{ .Values.app.minio.bucket }}"
+              mc mb --ignore-existing "local/{{ .Values.app.minio.bucket }}"
+
+              # Never mutate or delete originals/**. This job only ensures the bucket exists.
+          env:
+            - name: MINIO_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "tline.secretName" . }}
+                  key: MINIO_ACCESS_KEY_ID
+            - name: MINIO_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "tline.secretName" . }}
+                  key: MINIO_SECRET_ACCESS_KEY
+          resources:
+{{ toYaml .Values.jobs.ensureBucket.resources | indent 12 }}
+{{- end }}