65 lines
2.5 KiB
Smarty
65 lines
2.5 KiB
Smarty
{{- if and .Values.jobs.ensureBucket.enabled .Values.minio.enabled -}}
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: {{ include "tline.componentName" (dict "Values" .Values "Chart" .Chart "Release" .Release "component" "ensure-bucket") }}
|
|
labels:
|
|
{{ include "tline.labels" . | indent 4 }}
|
|
app.kubernetes.io/component: ensure-bucket
|
|
annotations:
|
|
"helm.sh/hook": pre-install,pre-upgrade
|
|
"helm.sh/hook-weight": "-20"
|
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
|
spec:
|
|
backoffLimit: 2
|
|
template:
|
|
metadata:
|
|
labels:
|
|
{{ include "tline.selectorLabels" . | indent 8 }}
|
|
app.kubernetes.io/component: ensure-bucket
|
|
spec:
|
|
restartPolicy: Never
|
|
{{ include "tline.imagePullSecrets" . | indent 6 }}
|
|
{{- $aff := include "tline.affinity" (dict "Values" .Values "schedulingClass" .Values.minio.schedulingClass) }}
|
|
{{- if $aff }}
|
|
affinity:
|
|
{{ $aff | indent 8 }}
|
|
{{- end }}
|
|
{{- $tols := include "tline.tolerations" (dict "Values" .Values "schedulingClass" .Values.minio.schedulingClass) }}
|
|
{{- if $tols }}
|
|
tolerations:
|
|
{{ $tols | indent 8 }}
|
|
{{- end }}
|
|
containers:
|
|
- name: ensure-bucket
|
|
image: {{ printf "%s:%s" .Values.jobs.ensureBucket.image.repository .Values.jobs.ensureBucket.image.tag | quote }}
|
|
imagePullPolicy: {{ .Values.jobs.ensureBucket.image.pullPolicy }}
|
|
command:
|
|
- sh
|
|
- -c
|
|
- |
|
|
set -eu
|
|
echo "Configuring mc alias..."
|
|
{{- $minioSvc := include "tline.componentName" (dict "Values" .Values "Chart" .Chart "Release" .Release "component" "minio") -}}
|
|
{{- $minioEndpoint := printf "http://%s:%d" $minioSvc (.Values.minio.service.s3Port | int) -}}
|
|
mc alias set local {{ $minioEndpoint | quote }} "$MINIO_ACCESS_KEY_ID" "$MINIO_SECRET_ACCESS_KEY"
|
|
|
|
echo "Ensuring bucket exists: {{ .Values.app.minio.bucket }}"
|
|
mc mb --ignore-existing "local/{{ .Values.app.minio.bucket }}"
|
|
|
|
# Never mutate or delete originals/**. This job only ensures the bucket exists.
|
|
env:
|
|
- name: MINIO_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ include "tline.secretName" . }}
|
|
key: MINIO_ACCESS_KEY_ID
|
|
- name: MINIO_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ include "tline.secretName" . }}
|
|
key: MINIO_SECRET_ACCESS_KEY
|
|
resources:
|
|
{{ toYaml .Values.jobs.ensureBucket.resources | indent 12 }}
|
|
{{- end }}
|