gcloud-lab/apps/base/osint-dashboard/templates/minio/buckets-init-job.yaml

62 lines
1.9 KiB
YAML
Raw Normal View History

{{- if .Values.minio.enabled }}
apiVersion: batch/v1
kind: Job
metadata:
name: minio-buckets-init
namespace: {{ .Values.namespace }}
labels:
{{- include "osint-dashboard.labels" . | nindent 4 }}
app.kubernetes.io/component: object-storage
annotations:
"helm.sh/hook": post-install,post-upgrade
"helm.sh/hook-delete-policy": hook-succeeded
spec:
template:
metadata:
labels:
{{- include "osint-dashboard.selectorLabels" . | nindent 8 }}
app.kubernetes.io/component: object-storage
spec:
restartPolicy: OnFailure
securityContext:
runAsNonRoot: true
runAsUser: 1000
containers:
- name: mc
image: "{{ .Values.minio.image.repository }}:{{ .Values.minio.image.tag }}"
envFrom:
- secretRef:
name: {{ .Values.minio.credentialsSecret }}
command:
- /bin/sh
- -c
args:
- |
# Wait for MinIO to be ready
until curl -sf http://minio:{{ .Values.minio.ports.api }}/minio/health/live; do
echo "Waiting for MinIO..."
sleep 2
done
# Configure mc alias
mc alias set myminio http://minio:{{ .Values.minio.ports.api }} $MINIO_ROOT_USER $MINIO_ROOT_PASSWORD
# Create buckets
mc mb --ignore-existing myminio/osint-video-clips
mc mb --ignore-existing myminio/osint-satellite-tiles
mc mb --ignore-existing myminio/osint-data-dumps
echo "MinIO buckets initialized successfully"
resources:
requests:
cpu: "100m"
memory: "64Mi"
limits:
cpu: "500m"
memory: "256Mi"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
{{- end }}