{{- if .Values.seedJob.enabled }}
apiVersion: batch/v1
kind: Job
metadata:
  name: {{ include "backend.fullname" . }}-seed
  labels:
    {{- include "backend.labels" . | nindent 4 }}
  annotations:
    # post-install only, never post-upgrade: cmd/seed hard-fails if
    # SEED_ADMIN_USERNAME already exists (see backend/cmd/seed/main.go), so
    # it is not safe to re-run on every upgrade. Turn seedJob.enabled back
    # off after the first successful install.
    "helm.sh/hook": post-install
    "helm.sh/hook-weight": "5"
    "helm.sh/hook-delete-policy": before-hook-creation
spec:
  backoffLimit: {{ .Values.seedJob.backoffLimit }}
  template:
    metadata:
      labels:
        app.kubernetes.io/name: {{ include "backend.name" . }}-seed
        app.kubernetes.io/instance: {{ .Release.Name }}
        app.kubernetes.io/component: seed
    spec:
      restartPolicy: Never
      {{- with .Values.imagePullSecrets }}
      imagePullSecrets:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      containers:
        - name: seed
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          command: ["/app/seed"]
          envFrom:
            - configMapRef:
                name: {{ include "backend.fullname" . }}
            - secretRef:
                name: {{ include "backend.secretName" . }}
{{- end }}