{{- if and .Values.jobs.ensureBucket.enabled .Values.minio.enabled -}}
apiVersion: batch/v1
kind: Job
metadata:
  name: {{ include "tline.componentName" (dict "Values" .Values "Chart" .Chart "Release" .Release "component" "ensure-bucket") }}
  labels:
{{ include "tline.labels" . | indent 4 }}
    app.kubernetes.io/component: ensure-bucket
  annotations:
    "helm.sh/hook": pre-install,pre-upgrade
    "helm.sh/hook-weight": "-20"
    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
spec:
  backoffLimit: 2
  template:
    metadata:
      labels:
{{ include "tline.selectorLabels" . | indent 8 }}
        app.kubernetes.io/component: ensure-bucket
    spec:
      restartPolicy: Never
{{ include "tline.imagePullSecrets" . | indent 6 }}
{{- $aff := include "tline.affinity" (dict "Values" .Values "schedulingClass" .Values.minio.schedulingClass) }}
{{- if $aff }}
      affinity:
{{ $aff | indent 8 }}
{{- end }}
{{- $tols := include "tline.tolerations" (dict "Values" .Values "schedulingClass" .Values.minio.schedulingClass) }}
{{- if $tols }}
      tolerations:
{{ $tols | indent 8 }}
{{- end }}
      containers:
        - name: ensure-bucket
          image: {{ printf "%s:%s" .Values.jobs.ensureBucket.image.repository .Values.jobs.ensureBucket.image.tag | quote }}
          imagePullPolicy: {{ .Values.jobs.ensureBucket.image.pullPolicy }}
          command:
            - sh
            - -c
            - |
              set -eu
              echo "Configuring mc alias..."
{{- $minioSvc := include "tline.componentName" (dict "Values" .Values "Chart" .Chart "Release" .Release "component" "minio") -}}
{{- $minioEndpoint := printf "http://%s:%d" $minioSvc (.Values.minio.service.s3Port | int) -}}
              mc alias set local {{ $minioEndpoint | quote }} "$MINIO_ACCESS_KEY_ID" "$MINIO_SECRET_ACCESS_KEY"

              echo "Ensuring bucket exists: {{ .Values.app.minio.bucket }}"
              mc mb --ignore-existing "local/{{ .Values.app.minio.bucket }}"

              # Never mutate or delete originals/**. This job only ensures the bucket exists.
          env:
            - name: MINIO_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: {{ include "tline.secretName" . }}
                  key: MINIO_ACCESS_KEY_ID
            - name: MINIO_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: {{ include "tline.secretName" . }}
                  key: MINIO_SECRET_ACCESS_KEY
          resources:
{{ toYaml .Values.jobs.ensureBucket.resources | indent 12 }}
{{- end }}