56 lines
2.0 KiB
YAML
56 lines
2.0 KiB
YAML
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: auth-db-migration
|
|
spec:
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
vault.hashicorp.com/agent-inject: "true"
|
|
vault.hashicorp.com/agent-service-account-token-volume-name: vault-token
|
|
vault.hashicorp.com/agent-inject-secret-migration-env: database/creds/auth-db-migration-dev
|
|
vault.hashicorp.com/agent-inject-template-migration-env: |
|
|
{{- with secret "database/creds/auth-db-migration-dev" -}}
|
|
export APP_DATASOURCE_USERNAME={{ printf "%q" .Data.username }}
|
|
export APP_DATASOURCE_PASSWORD={{ printf "%q" .Data.password }}
|
|
{{- end }}
|
|
vault.hashicorp.com/agent-pre-populate-only: "true"
|
|
vault.hashicorp.com/agent-run-as-group: "10001"
|
|
vault.hashicorp.com/agent-run-as-user: "10001"
|
|
vault.hashicorp.com/role: auth-db-migration-dev
|
|
spec:
|
|
automountServiceAccountToken: false
|
|
volumes:
|
|
- name: vault-token
|
|
projected:
|
|
defaultMode: 0444
|
|
sources:
|
|
- serviceAccountToken:
|
|
audience: vault
|
|
expirationSeconds: 3600
|
|
path: token
|
|
containers:
|
|
- name: auth-db-migration
|
|
command:
|
|
- /bin/sh
|
|
- -ec
|
|
args:
|
|
- |
|
|
. /vault/secrets/migration-env
|
|
exec java -jar /app/migration.jar
|
|
env:
|
|
- $patch: replace
|
|
- name: SPRING_MAIN_WEB_APPLICATION_TYPE
|
|
value: none
|
|
- name: APP_PERSISTENCE_MIGRATION_RUN_ON_STARTUP
|
|
value: "true"
|
|
- name: APP_PERSISTENCE_MIGRATION_LOCATION
|
|
value: classpath:db/migration
|
|
- name: APP_DATASOURCE_URL
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: auth-server-config
|
|
key: APP_DATASOURCE_URL
|
|
- name: APP_DATASOURCE_DRIVER_CLASS_NAME
|
|
value: org.postgresql.Driver
|