bootstrap-job.yaml

{{- if or .Values.bootstrap.auth.secretName (or .Values.bootstrap.ddldml.raw .Values.bootstrap.ddldml.configMap) -}}
apiVersion: batch/v1
kind: Job
metadata:
  name: {{ include "influxdb-enterprise.fullname" . }}-bootstrap
  labels:
    {{- include "influxdb-enterprise.labels" . | nindent 4 }}
  annotations:
    "helm.sh/hook": post-install
    "helm.sh/hook-delete-policy": hook-succeeded
spec:
  activeDeadlineSeconds: 300
  backoffLimit: 10
  template:
    metadata:
      labels:
        {{- include "influxdb-enterprise.selectorLabels" . | nindent 8 }}
    spec:
      {{- if .Values.bootstrap.ddldml.configMap }}
      volumes:
      - name: ddldml
        configMap:
          name: {{ .Values.bootstrap.ddldml.configMap }}
      {{ end }}
      restartPolicy: OnFailure
      serviceAccountName: {{ template "influxdb-enterprise.serviceAccountName" . }}
      # Consider this a middleware of setup components.
      # Each is executed in-order until all of theme complete successfully.
      # This means that each command must be idempotent.
      initContainers:
      {{- if .Values.bootstrap.auth.secretName }}
      - name: auth
        {{- include "influxdb-enterprise.image" (dict "chart" .Chart "imageroot" .Values.image "podvals" .Values.data "podtype" "data") | indent 8 }}
        imagePullPolicy: {{ .Values.data.image.pullPolicy }}
        # Exposing these environment variables makes this command idempotent
        # as even if the authentication has been setup, we can still execute the command
        # and it won't error as nothing has changed
        env:
        - name: INFLUX_USERNAME
          valueFrom:
            secretKeyRef:
              name: {{ .Values.bootstrap.auth.secretName }}
              key: "username"
        - name: INFLUX_PASSWORD
          valueFrom:
            secretKeyRef:
              name: {{ .Values.bootstrap.auth.secretName }}
              key: "password"
        command:
          - influx
        args:
        {{- if .Values.data.https.enabled }}
          - -ssl 
        {{- if .Values.data.https.insecure }}
          - -unsafeSsl
        {{ end }}
        {{ end }}
          - -host
          - {{ include "influxdb-enterprise.fullname" . }}-data
          - -execute
          - CREATE USER $(INFLUX_USERNAME) WITH PASSWORD '$(INFLUX_PASSWORD)' WITH ALL PRIVILEGES
        resources:
          requests:
            cpu: 100m
            memory: 50Mi
          limits:
            cpu: 100m
            memory: 50Mi
      {{ end }}
      {{- if .Values.bootstrap.ddldml.configMap }}
      - name: ddl
        {{- include "influxdb-enterprise.image" (dict "chart" .Chart "imageroot" .Values.image "podvals" .Values.data "podtype" "data") | indent 8 }}
        imagePullPolicy: {{ .Values.data.image.pullPolicy }}
        {{- if .Values.bootstrap.auth.secretName }}
        env:
        - name: INFLUX_USERNAME
          valueFrom:
            secretKeyRef:
              name: {{ .Values.bootstrap.auth.secretName }}
              key: "username"
        - name: INFLUX_PASSWORD
          valueFrom:
            secretKeyRef:
              name: {{ .Values.bootstrap.auth.secretName }}
              key: "password"
        {{ end }}
        volumeMounts:
        - name: ddldml
          mountPath: /ddldml
        command:
          - influx
        args:
        {{- if .Values.data.https.enabled }}
          - -ssl 
        {{- if .Values.data.https.insecure }}
          - -unsafeSsl
        {{ end }}
        {{ end }}
          - -host
          - {{ include "influxdb-enterprise.fullname" . }}-data
          - -import
          - -path
          - /ddldml/ddl
        resources:
          {{- toYaml .Values.bootstrap.ddldml.resources | nindent 10 }}
      {{ end }}
      {{- if .Values.bootstrap.ddldml.configMap }}
      - name: dml
        {{- include "influxdb-enterprise.image" (dict "chart" .Chart "imageroot" .Values.image "podvals" .Values.data "podtype" "data") | indent 8 }}
        imagePullPolicy: {{ .Values.data.image.pullPolicy }}
        {{- if .Values.bootstrap.auth.secretName }}
        env:
        - name: INFLUX_USERNAME
          valueFrom:
            secretKeyRef:
              name: {{ .Values.bootstrap.auth.secretName }}
              key: "username"
        - name: INFLUX_PASSWORD
          valueFrom:
            secretKeyRef:
              name: {{ .Values.bootstrap.auth.secretName }}
              key: "password"
        {{ end }}
        volumeMounts:
        - name: ddldml
          mountPath: /ddldml
        command:
          - influx
        args:
        {{- if .Values.data.https.enabled }}
          - -ssl 
        {{- if .Values.data.https.insecure }}
          - -unsafeSsl
        {{ end }}
        {{ end }}
          - -host
          - {{ include "influxdb-enterprise.fullname" . }}-data
          - -import
          - -path
          - /ddldml/dml
        resources:
          {{- toYaml .Values.bootstrap.ddldml.resources | nindent 10 }}
      {{ end }}
      containers:
      - name: success
        {{- include "influxdb-enterprise.image" (dict "chart" .Chart "imageroot" .Values.image "podvals" .Values.data "podtype" "data") | indent 8 }}
        imagePullPolicy: {{ .Values.data.image.pullPolicy }}
        command:
          - echo
        args:
          - "Bootstrap Success"
        resources:
          requests:
            cpu: 100m
            memory: 50Mi
          limits:
            cpu: 100m
            memory: 50Mi
{{ end }}