From ec30d2cf89c9e67fb8ddbe57cf38e37ac8e51fa5 Mon Sep 17 00:00:00 2001
From: Mikolaj Izdebski <mizdebsk@redhat.com>
Date: Fri, 13 Sep 2019 05:29:53 +0200
Subject: [PATCH] Koschei: create OpenShift Job object

---
 playbooks/openshift-apps/koschei.yml          | 13 ++++++++++
 .../openshift-apps/koschei/templates/job.yml  | 24 +++++++++++++++++++
 2 files changed, 37 insertions(+)
 create mode 100644 roles/openshift-apps/koschei/templates/job.yml

diff --git a/playbooks/openshift-apps/koschei.yml b/playbooks/openshift-apps/koschei.yml
index 28d204da29..14cd09cfb3 100644
--- a/playbooks/openshift-apps/koschei.yml
+++ b/playbooks/openshift-apps/koschei.yml
@@ -55,6 +55,19 @@
       loop_control:
         label: "{{ item.name }}"
 
+    - name: Apply Job
+      include_role: name=openshift/object
+      vars:
+        template: job.yml
+        objectname: "{{ item.name }}-job.yml"
+        name: "{{ item.name }}"
+        command: "{{ item.command }}"
+      with_items:
+        - name: db-create
+          command: "koschei-admin create-db && koschei-admin create-collection f29 --display-name 'Fedora Rawhide' --target f29 --bugzilla-product Fedora --bugzilla-version rawhide && koschei-admin create-group php"
+      loop_control:
+        label: "{{ item.name }}"
+
     - name: Apply CronJob
       include_role: name=openshift/object
       vars:
diff --git a/roles/openshift-apps/koschei/templates/job.yml b/roles/openshift-apps/koschei/templates/job.yml
new file mode 100644
index 0000000000..ffd7961ac4
--- /dev/null
+++ b/roles/openshift-apps/koschei/templates/job.yml
@@ -0,0 +1,24 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: "job-{{name}}"
+spec:
+  parallelism: 0
+  template:
+    spec:
+      containers:
+      - name: "job-{{name}}"
+        image: quay.io/koschei/koschei:latest
+        command: ["/bin/bash", "-euxc", "{{command}}"]
+        env:
+          - name: SUDO_USER
+            value: "job-{{name}}"
+        volumeMounts:
+          - name: config
+            mountPath: /etc/koschei
+            readOnly: true
+      restartPolicy: Never
+      volumes:
+        - name: config
+          secret:
+            secretName: backend-config