[MOSIP-23969]

charts/regclient/templates/pre-install-job.yaml

@@ -0,0 +1,40 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: "{{.Release.Name}}-{{ .Release.Namespace }}-job"
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/managed-by: {{.Release.Service | quote }}
+    app.kubernetes.io/instance: {{.Release.Name | quote }}
+    helm.sh/chart: "{{.Chart.Name}}-{{.Chart.Version}}"
+    app: generate-certs
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-2"
+    "helm.sh/hook-delete-policy": hook-succeeded
+spec:
+  template:
+    metadata:
+      name: "{{.Release.Name}}"
+      namespace: {{ .Release.Namespace }}
+      labels:
+        app.kubernetes.io/managed-by: {{.Release.Service | quote }}
+        app.kubernetes.io/instance: {{.Release.Name | quote }}
+        helm.sh/chart: "{{.Chart.Name}}-{{.Chart.Version}}"
+        sidecar.istio.io/inject: "false"
+    spec:
+      restartPolicy: Never
+      serviceAccountName: {{ template "regclient.serviceAccountName" . }}
+      containers:
+      - name: openssl-container
+        image: "{{ .Values.job.image }}:{{ .Values.job.tag }}"
+        imagePullPolicy: {{ .Values.job.pullPolicy }}
+        env:
+        - name: NAMESPACE
+          value: "{{ .Release.Namespace }}"
+        volumeMounts:
+        - name: certs-volume
+          mountPath: /home/mosip/certs
+      volumes:
+      - name: certs-volume
+        emptyDir: {}

charts/regclient/templates/role-preinstalljob.yaml

@@ -0,0 +1,12 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  namespace: {{ .Release.Namespace }}
+  name: {{.Release.Name}}-{{ .Release.Namespace }}-role
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-4"
+rules:
+  - apiGroups: [""]
+    resources: ["pods","configmaps", "secrets"]
+    verbs: ["get","list","create", "update", "delete", "patch"]

charts/regclient/templates/rolebinding-preinstall-job.yaml

@@ -0,0 +1,16 @@
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{.Release.Name}}-{{ .Release.Namespace }}-rolebinding
+  namespace: {{ .Release.Namespace }}
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-3"
+subjects:
+  - kind: ServiceAccount
+    name: {{ template "regclient.serviceAccountName" . }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: Role
+  name: {{.Release.Name}}-{{ .Release.Namespace }}-role
+  apiGroup: rbac.authorization.k8s.io

charts/regclient/templates/service-account.yaml

@@ -9,4 +9,7 @@ metadata:
   {{- if .Values.commonAnnotations }}
   annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
   {{- end }}
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-5"
   namespace: {{ .Release.Namespace }}

charts/regclient/values.yaml

@@ -64,6 +64,11 @@ image:
   ##
   # pullSecrets:
   #   - myRegistryKeySecretName
+# Configuration for the Job
+job:
+  image: mosipdev/openssl-regclient
+  tag: latest
+  pullPolicy: IfNotPresent
 
 regclient:
   version: 1.2.1-SNAPSHOT