apiVersion: batch/v1
kind: Job
metadata:
  name: loomio-db-init
spec:
  template:
    spec:
      restartPolicy: OnFailure
      containers:
      - name: db-init
        image: {{ .image }}
        command:
        - /bin/bash
        - -c
        - |
          set -e
          echo "Initializing Loomio database..."
          # Patch schema.rb to use IF NOT EXISTS for pghero schema
          sed -i 's/create_schema "pghero"/execute "CREATE SCHEMA IF NOT EXISTS pghero"/g' db/schema.rb
          bundle exec rake db:schema:load db:seed
          echo "Database initialization complete"
        env:
        - name: RAILS_ENV
          value: production
        - name: DATABASE_URL
          valueFrom:
            secretKeyRef:
              name: loomio-secrets
              key: dbUrl
        - name: REDIS_URL
          value: {{ .redisUrl }}
        - name: DEVISE_SECRET
          valueFrom:
            secretKeyRef:
              name: loomio-secrets
              key: deviseSecret
        - name: SECRET_COOKIE_TOKEN
          valueFrom:
            secretKeyRef:
              name: loomio-secrets
              key: secretCookieToken
        securityContext:
          runAsNonRoot: false
          runAsUser: 0
          allowPrivilegeEscalation: false
          capabilities:
            drop: [ALL]
          readOnlyRootFilesystem: false
          seccompProfile:
            type: RuntimeDefault
      securityContext:
        runAsNonRoot: false
        runAsUser: 0
        seccompProfile:
          type: RuntimeDefault