apiVersion: batch/v1
kind: Job
metadata:
  name: firefly-storage-prep
  annotations:
    argocd.argoproj.io/hook: PreSync
    argocd.argoproj.io/hook-delete-policy: BeforeHookCreation,HookSucceeded
spec:
  backoffLimit: 3
  template:
    metadata:
      labels:
        app.kubernetes.io/name: firefly-storage-prep
    spec:
      restartPolicy: OnFailure
      nodeSelector:
        kubernetes.io/hostname: ai.tail2fe2d.ts.net
      tolerations:
        - key: workload
          operator: Equal
          value: ai
          effect: NoSchedule
      containers:
        - name: prepare
          image: busybox:1.37.0
          imagePullPolicy: IfNotPresent
          command:
            - /bin/sh
            - -ec
            - |
              mkdir -p /host/k8s/firefly-iii/postgres
              chown 26:26 /host/k8s/firefly-iii/postgres
              chmod 0700 /host/k8s/firefly-iii/postgres
          securityContext:
            runAsUser: 0
            runAsGroup: 0
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
              add:
                - CHOWN
                - DAC_OVERRIDE
                - FOWNER
          volumeMounts:
            - name: host-root
              mountPath: /host/k8s/firefly-iii
      volumes:
        - name: host-root
          hostPath:
            path: /k8s/firefly-iii
            type: DirectoryOrCreate