---
apiVersion: batch/v1
kind: Job
metadata:
  name: dtrack-init
  namespace: artifact-keeper
  labels:
    app.kubernetes.io/name: artifact-keeper
    app.kubernetes.io/instance: ak
    app.kubernetes.io/part-of: artifact-keeper
    app.kubernetes.io/component: dependency-track
spec:
  backoffLimit: 3
  template:
    metadata:
      labels:
        app.kubernetes.io/name: artifact-keeper
        app.kubernetes.io/instance: ak
        app.kubernetes.io/component: dependency-track
    spec:
      restartPolicy: OnFailure
      automountServiceAccountToken: false
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
        fsGroup: 1000
      containers:
        - name: dtrack-init
          image: alpine:3.20
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
          resources:
            requests:
              cpu: 10m
              memory: 32Mi
              ephemeral-storage: 64Mi
            limits:
              cpu: 200m
              memory: 128Mi
              ephemeral-storage: 128Mi
          command: ["/bin/sh", "-c"]
          args:
            - |
              apk add --no-cache curl jq >/dev/null 2>&1
              /bin/sh /scripts/init-dtrack.sh
          env:
            - name: DEPENDENCY_TRACK_URL
              value: "http://dtrack:8080"
            - name: DEPENDENCY_TRACK_ADMIN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: app-secrets
                  key: DEPENDENCY_TRACK_ADMIN_PASSWORD
          volumeMounts:
            - name: init-script
              mountPath: /scripts
              readOnly: true
            - name: shared-config
              mountPath: /shared
      volumes:
        - name: init-script
          configMap:
            name: dtrack-init
            defaultMode: 0755
        - name: shared-config
          persistentVolumeClaim:
            claimName: shared-config