wild-directory/ghost/versions/6/db-init-job.yaml

apiVersion: batch/v1
kind: Job
metadata:
  name: ghost-db-init
  labels:
    component: db-init
spec:
  template:
    metadata:
      labels:
        component: db-init
    spec:
      containers:
        - name: db-init
          image: mysql:9.1.0
          command: ["/bin/bash", "-c"]
          args:
            - |
              mysql -h ${DB_HOSTNAME} -P ${DB_PORT} -u root -p${MYSQL_ROOT_PASSWORD} <<EOF
              CREATE DATABASE IF NOT EXISTS ${DB_DATABASE_NAME};
              CREATE USER IF NOT EXISTS '${DB_USERNAME}'@'%' IDENTIFIED BY '${DB_PASSWORD}';
              ALTER USER '${DB_USERNAME}'@'%' IDENTIFIED BY '${DB_PASSWORD}';
              GRANT ALL PRIVILEGES ON ${DB_DATABASE_NAME}.* TO '${DB_USERNAME}'@'%';
              FLUSH PRIVILEGES;
              EOF
          env:
            - name: MYSQL_ROOT_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: ghost-secrets
                  key: mysql.rootPassword
            - name: DB_HOSTNAME
              value: "{{ .db.host }}"
            - name: DB_PORT
              value: "{{ .db.port }}"
            - name: DB_DATABASE_NAME
              value: "{{ .db.name }}"
            - name: DB_USERNAME
              value: "{{ .db.user }}"
            - name: DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: ghost-secrets
                  key: dbPassword
      restartPolicy: OnFailure