Team jobs

.demo/env/clouds/aws/demo/jobs.demo.yaml

@@ -0,0 +1,121 @@
+teamConfig:
+    teams:
+        demo:
+            jobs:
+                - enabled: true
+                  env:
+                      receiver: world
+                  files:
+                      /config/some-file: someData
+                      /config/some/file2: someData2
+                      /config/some-file3: |-
+                          some data on another line
+                          another line
+                  image:
+                      repository: busybox
+                      tag: latest
+                      pullPolicy: IfNotPresent
+                  init:
+                      env:
+                          foo: bar
+                      image:
+                          repository: busybox
+                          tag: latest
+                          pullPolicy: IfNotPresent
+                      script: echo "hello $receiver and $SOME-KEY"
+                      secrets:
+                          - name: generic-example
+                            entries:
+                                - some-key
+                                - some-key2
+                          - name: another-generic-secret
+                            entries:
+                                - some-key3
+                  name: contains-everything
+                  runPolicy: Always
+                  script: echo "hello $receiver"
+                  secrets:
+                      - name: generic-example
+                        entries:
+                            - some-key
+                            - some-key2
+                      - name: another-generic-secret
+                        entries:
+                            - some-key3
+                  type: Job
+                - enabled: true
+                  env:
+                      receiver: world
+                  files:
+                      some-file: someData
+                      some-file2: someData2
+                      some-file3: |-
+                          some data on another line
+                          another line
+                  image:
+                      repository: busybox
+                      tag: latest
+                      pullPolicy: IfNotPresent
+                  init:
+                      env:
+                          foo: bar
+                      image:
+                          repository: busybox
+                          tag: latest
+                          pullPolicy: IfNotPresent
+                      script: echo "hello $receiver"
+                      secrets:
+                          - name: generic-example
+                            entries:
+                                - some-key
+                                - some-key2
+                          - name: another-generic-secret
+                            entries:
+                                - some-key3
+                  name: also-contains-everything-and-cron
+                  runPolicy: Always
+                  schedule: 0 1 * * *
+                  script: echo "hello $receiver"
+                  secrets:
+                      - name: generic-example
+                        entries:
+                            - some-key
+                            - some-key2
+                      - name: another-generic-secret
+                        entries:
+                            - some-key3
+                  type: CronJob
+                - enabled: true
+                  image:
+                      repository: busybox
+                      tag: latest
+                      pullPolicy: IfNotPresent
+                  name: base
+                  script: echo "hello $receiver"
+                  type: Job
+                - enabled: true
+                  image:
+                      repository: busybox
+                      tag: latest
+                      pullPolicy: IfNotPresent
+                  name: base-cronjob
+                  schedule: 0 1 * * *
+                  script: echo "hello world"
+                  type: CronJob
+                - enabled: true
+                  image:
+                      repository: busybox
+                      tag: latest
+                      pullPolicy: IfNotPresent
+                  init:
+                      env:
+                          foo: bar
+                      image:
+                          repository: busybox
+                          tag: latest
+                          pullPolicy: IfNotPresent
+                      script: echo "hello world"
+                  name: init-cronjob
+                  schedule: 0 1 * * *
+                  script: echo "hello $receiver"
+                  type: CronJob

.demo/env/teams/secrets.demo.yaml

@@ -1,4 +1,122 @@
 teamConfig:
     teams:
         demo:
-            secrets: []
+            secrets:
+                - name: gcr-example
+                  type: docker-registry
+                  server: eu.gcr.io
+                  username: _json_key
+                  password: '{   "type": "service_account",   "project_id": "otomi-cloud",   "private_key_id":
+                      "f8e533c9e8179f89d5f512b8eba75179c8d85416",   "private_key": "",   "client_email":
+                      "gcr-auth-ro-test@otomi-cloud.iam.gserviceaccount.com",   "client_id":
+                      "107392620088719932858",   "auth_uri": "https://accounts.google.com/o/oauth2/auth",   "token_uri":
+                      "https://oauth2.googleapis.com/token",   "auth_provider_x509_cert_url":
+                      "https://www.googleapis.com/oauth2/v1/certs",   "client_x509_cert_url":
+                      "https://www.googleapis.com/robot/v1/metadata/x509/gcr-auth-ro-test%40otomi-cloud.iam.gserviceaccount.com"
+                      }'
+                  id: 45e00dd6-fd0a-4c3c-95dc-b147501bbea9
+                - name: generic-example
+                  type: generic
+                  entries:
+                      - key: some-key
+                        value: value
+                      - key: some-key2
+                        value: value2
+                  id: f7f9def1-cc52-465b-9da2-87e9fec4cf95
+                - name: tls-example
+                  type: tls
+                  crt: |
+                      -----BEGIN CERTIFICATE-----
+                      MIIFZTCCBE2gAwIBAgISA4vOUteW3MIgHDowgJ14vmJ3MA0GCSqGSIb3DQEBCwUA
+                      MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
+                      ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA2MjIxNjAxMzlaFw0y
+                      MDA5MjAxNjAxMzlaMCExHzAdBgNVBAMMFiouZGVtby5na2Uub3RvbWkuY2xvdWQw
+                      ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDBCGKlgiREvNvHYIplj8
+                      nNOAB2ARqxptxGfmN/cIE2cS4YguFxb7Jpm+TwPJIxC0UvKRhJpmle/2dQ80TAGV
+                      9jwWajO/w2b9D6rJ9t5D5NRWY9iO4EtuOuoRgt2Kprnncrh/i0s7T2gaGNeQgxmp
+                      wyI050rm6TKJW15+7kzs3bZwvXmscz5QrYOni1EORBjrfFn2ALgVwQWEHAKIwp2I
+                      fQyagVC0d5DVE39XOMuFzhU6QN33GCiRRKPoa+/RVFH9IiblNVe8qzO6yAf3YVeG
+                      6CsttzCCr3nYoJDVaU7yCYya3TpTdM+0F8egm4ybO4rGBnGxJ2EroGcg/EHS86eD
+                      AgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
+                      AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJzrcl/NDLYO5BgI
+                      hZVrvuZdBrXTMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
+                      AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
+                      bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
+                      bmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIWKi5kZW1vLmdrZS5vdG9taS5jbG91ZDBM
+                      BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
+                      FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE
+                      gfMA8QB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABctz6btoA
+                      AAQDAEgwRgIhANYSIadn5gmy7GCBeG7Hfil2lP6/KfOR9Gzg31v2Y1NqAiEArPZh
+                      LleYT+do5LP90HkwP4jVE/uS9hmXvd/i+5P9+CkAdgAHt1wb5X1o//Gwxh0jFce6
+                      5ld8V5S3au68YToaadOiHAAAAXLc+m77AAAEAwBHMEUCIATG3UD1Kr5Gqc/LQOXy
+                      dj4zNlnmo/5/Wp89VtdFmuJNAiEAgh87M+7mAzsZ/BwLrU51V6RdCDB5XoIPQYLZ
+                      3gzoi1EwDQYJKoZIhvcNAQELBQADggEBABaXUl4x9hpoz+J+HcIoTDMZFSCYOpAk
+                      XtVlGzl7NsUUz8c8UuOMKEhLSZEDqzq223dAMiUoQySFK45UAamMhTR7FRWcXLO1
+                      jEP2IdHWVARFF1jQit8Y+PGopzIWWMG77klI4CRSzVOmK/i2JuP7ayJZLs8hsakK
+                      6M1Qn/INL5GJ3of6lZftDUe+g6UBKIQ3Ika/2aIMo0LnL0HOlatZ1LcU6/9vKExu
+                      s3XCpE3XqDwm5rMITQ8idjK3MubqjJe4kRAxmXZKtCUogZB0Bj0TZst5aSete9tn
+                      tnJcqAvKYS+Ai2mGqzthtAlCO4r7o/WIypvHzcFxrn+tIO+V3IdYTmg=
+                      -----END CERTIFICATE-----
+                      -----BEGIN CERTIFICATE-----
+                      MIIEkjCCA3qgAwIBAgIQCgFBQgAAAVOFc2oLheynCDANBgkqhkiG9w0BAQsFADA/
+                      MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT
+                      DkRTVCBSb290IENBIFgzMB4XDTE2MDMxNzE2NDA0NloXDTIxMDMxNzE2NDA0Nlow
+                      SjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUxldCdzIEVuY3J5cHQxIzAhBgNVBAMT
+                      GkxldCdzIEVuY3J5cHQgQXV0aG9yaXR5IFgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
+                      AQ8AMIIBCgKCAQEAnNMM8FrlLke3cl03g7NoYzDq1zUmGSXhvb418XCSL7e4S0EF
+                      q6meNQhY7LEqxGiHC6PjdeTm86dicbp5gWAf15Gan/PQeGdxyGkOlZHP/uaZ6WA8
+                      SMx+yk13EiSdRxta67nsHjcAHJyse6cF6s5K671B5TaYucv9bTyWaN8jKkKQDIZ0
+                      Z8h/pZq4UmEUEz9l6YKHy9v6Dlb2honzhT+Xhq+w3Brvaw2VFn3EK6BlspkENnWA
+                      a6xK8xuQSXgvopZPKiAlKQTGdMDQMc2PMTiVFrqoM7hD8bEfwzB/onkxEz0tNvjj
+                      /PIzark5McWvxI0NHWQWM6r6hCm21AvA2H3DkwIDAQABo4IBfTCCAXkwEgYDVR0T
+                      AQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwfwYIKwYBBQUHAQEEczBxMDIG
+                      CCsGAQUFBzABhiZodHRwOi8vaXNyZy50cnVzdGlkLm9jc3AuaWRlbnRydXN0LmNv
+                      bTA7BggrBgEFBQcwAoYvaHR0cDovL2FwcHMuaWRlbnRydXN0LmNvbS9yb290cy9k
+                      c3Ryb290Y2F4My5wN2MwHwYDVR0jBBgwFoAUxKexpHsscfrb4UuQdf/EFWCFiRAw
+                      VAYDVR0gBE0wSzAIBgZngQwBAgEwPwYLKwYBBAGC3xMBAQEwMDAuBggrBgEFBQcC
+                      ARYiaHR0cDovL2Nwcy5yb290LXgxLmxldHNlbmNyeXB0Lm9yZzA8BgNVHR8ENTAz
+                      MDGgL6AthitodHRwOi8vY3JsLmlkZW50cnVzdC5jb20vRFNUUk9PVENBWDNDUkwu
+                      Y3JsMB0GA1UdDgQWBBSoSmpjBH3duubRObemRWXv86jsoTANBgkqhkiG9w0BAQsF
+                      AAOCAQEA3TPXEfNjWDjdGBX7CVW+dla5cEilaUcne8IkCJLxWh9KEik3JHRRHGJo
+                      uM2VcGfl96S8TihRzZvoroed6ti6WqEBmtzw3Wodatg+VyOeph4EYpr/1wXKtx8/
+                      wApIvJSwtmVi4MFU5aMqrSDE6ea73Mj2tcMyo5jMd6jmeWUHK8so/joWUoHOUgwu
+                      X4Po1QYz+3dszkDqMp4fklxBwXRsW10KXzPMTZ+sOPAveyxindmjkW8lGy+QsRlG
+                      PfZ+G6Z6h7mjem0Y+iWlkYcV4PIWL1iwBi8saCbGS5jN2p8M+X+Q7UNKEkROb3N6
+                      KOqkqm57TH2H3eDJAkSnh6/DNFu0Qg==
+                      -----END CERTIFICATE-----
+                  key: |
+                      -----BEGIN RSA PRIVATE KEY-----
+                      MIIEowIBAAKCAQEA3QwQhipYIkRLzbx2CKZY/JzTgAdgEasabcRn5jf3CBNnEuGI
+                      LhcW+yaZvk8DySMQtFLykYSaZpXv9nUPNEwBlfY8Fmozv8Nm/Q+qyfbeQ+TUVmPY
+                      juBLbjrqEYLdiqa553K4f4tLO09oGhjXkIMZqcMiNOdK5ukyiVtefu5M7N22cL15
+                      rHM+UK2Dp4tRDkQY63xZ9gC4FcEFhBwCiMKdiH0MmoFQtHeQ1RN/VzjLhc4VOkDd
+                      9xgokUSj6Gvv0VRR/SIm5TVXvKszusgH92FXhugrLbcwgq952KCQ1WlO8gmMmt06
+                      U3TPtBfHoJuMmzuKxgZxsSdhK6BnIPxB0vOngwIDAQABAoIBAEZ8bGB77DKxGIL4
+                      T6MeeE3FLGQs9eNsbjcGZCMzQWCf30RUCnq3/ioD+w6GX6yps8/si1D/ucRwl149
+                      oaWJfw/0vuBe6TWC97pGXq2cPO/lbhhGKm4U87iorK78zexCkhFNsatqHYlCHu4D
+                      cemxBGPvx16bSnUrc2P9cLqE/p6g1JNljHproCnPaPtXgiNYGTGi1sv1bzr4cB65
+                      dhjJzKoY5wTcGvNjRuWQ7B3K/Cc/tUxmUNtus2zhwmITkiC2JU5e+5ZSlCaf6blY
+                      xg3aaPlbX0qAnijRB0wLUqZKAawGCy7znQp1ZrRuZ+XcN7E6ko+PuXTqKntYI5vL
+                      w91XwGECgYEA5OLKrwh9jxfcICCNojKWLdtrQUOeUQ52zv+mbpl2NZ3YasfMAsdL
+                      nUoizdusDIlK3tdt0zoEZp/oVfZkLHo7FxNks2TiMsAcH2qgd8VgP7WrEf1aQpDr
+                      HVV7YiWG9KiTISAHn6C53HB9yrb5dx51J0n78OOryxecuExLpbKyDfkCgYEA9zuN
+                      tM+3IQGywQ8VCbGJW5Hd+/kc5/E4MS/K5rFKVIONd0tIgJ+BCUOMsDlveCEwz/mT
+                      ysv6gxsFPZshKsBGBA0jkUb35p6TiLiwkweW05zBaims9nPrtPftzdGpXcP9hbUD
+                      E4fyrGNEL2EX7ybZsniCcUMJxFDKiZEzP23aMFsCgYBpASqfFjQUG4wfKRARI0gG
+                      ja0s6cqNwSb8XAiMoNa8Tkfk5PhRJgEojcRd0LOjpLC2fvqhdvJh6mZ6WWknhoPp
+                      WDpQmq2zPrMoLpCjoedAEyYCQMrR0w4qDPdn1XOOdm/ZOIqGzwO1f94Vy8+yuERi
+                      2+w7XReJOrHpUwc5YzuQcQKBgQCgccqV09NRnUuHVKVfhBLTFUfNdS5YK8g+y3hO
+                      3DGTxUfyai3kIx9Xhrnvx2ZavJdz8NED4/pwSQHOqDUPDHajvG8focHRrYmrSch1
+                      spAkRm+S2PcBfdsyt09hqbXTPxTxR7Z2X1ySmV0vrkAdGMZgtypYHJxjBddbDZsH
+                      h9/4TwKBgD7iPbFgtQZU3xKu+nh4IULAmT1I8pn7B0hUiyakfURF1SuppzMxhFhw
+                      15mglTQlUm7dBvgHzR/FJnY6RgfIWReBUnOF3Z0Ik+yTqAR3yV3UgAgBfwRca5vo
+                      EVM82KFbGCTz6O0bzOfgSTd+MdShJfDSwtAGz9QdkHLnrLZQyKte
+                      -----END RSA PRIVATE KEY-----
+                  ca: caaaa
+                  id: f25926eb-1198-4d22-98d7-74dab29beffa
+                - name: another-generic-secret
+                  type: generic
+                  entries:
+                      - key: some-key3
+                        value: value3
+                  id: 1c35edd0-85c1-405a-ac76-3c7eb9505253

charts/jobs/templates/_helpers.tpl

@@ -61,3 +61,13 @@ Create the name of the service account to use
     {{ default "default" .Values.serviceAccount.name }}
 {{- end -}}
 {{- end -}}
+
+{{- define "itemsByName" -}}
+{{- range $i := . }}
+{{ $i.name }}: {{- $i | toYaml | nindent 2 }}
+{{- end }}
+{{- end -}}
+
+{{- define "fileConfigMapName" -}}
+{{ printf "job-%s" (. | replace "." "" | replace "/" "") }}
+{{- end -}}

charts/jobs/templates/configmap.yaml

@@ -1,12 +1,26 @@
 {{- $v := .Values }}
-{{- range $name, $spec := $v.tasks }}
-{{- if and $spec.enabled $spec.env }}
+{{- if or (or $v.env $v.init.env) $v.files }}
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: job-{{ $name }}
+  name: job-{{ $v.name }}
   labels: {{- include "jobs.labels" $ | nindent 4 }}
-data: {{- toYaml $spec.env | nindent 2 }}
+data:
+  {{- with $v.env }}
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  {{- with $v.init.env  }}
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
 ---
 {{- end }}
+{{- range $location, $content := $v.files }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "fileConfigMapName" $location }}
+  labels: {{- include "jobs.labels" $ | nindent 4 }}
+data:
+  {{ include "fileConfigMapName" $location }}: {{- toYaml $content | nindent 4 }} 
+---
 {{- end }}