apiVersion: batch/v1
kind: Job
metadata:
  name: lldap-bootstrap
  annotations:
    kustomize.toolkit.fluxcd.io/force: enabled
spec:
  template:
    spec:
      restartPolicy: OnFailure
      containers:
        - name: lldap-bootstrap
          image: lldap/lldap:v0.5.0

          command:
            - /bootstrap/bootstrap.sh

          env:
            - name: LLDAP_URL
              value: "http://lldap:17170"

            - name: LLDAP_ADMIN_USERNAME
              value: admin

            - name: LLDAP_ADMIN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: lldap-credentials
                  key: lldap-ldap-user-pass

            - name: DO_CLEANUP
              value: "true"

          volumeMounts:
            - name: bootstrap
              mountPath: /bootstrap/bootstrap.sh
              readOnly: true
              subPath: bootstrap.sh

            - name: user-configs
              mountPath: /bootstrap/user-configs
              readOnly: true

            - name: group-configs
              mountPath: /bootstrap/group-configs
              readOnly: true

            - name: system-users
              mountPath: /bootstrap/system-users
              readOnly: true

      volumes:
        - name: bootstrap
          configMap:
            name: bootstrap
            defaultMode: 0555
            items:
              - key: bootstrap.sh
                path: bootstrap.sh

        - name: user-configs
          projected:
            sources:
              - secret:
                  name: lldap-bootstrap-configs
                  items:
                    - key: user-configs.json
                      path: user-configs.json
              - secret:
                  name: authelia-lldap
                  items:
                    - key: user-configs.json
                      path: authelia-configs.json
              - secret:
                  name: grafana-lldap
                  items:
                    - key: user-configs.json
                      path: grafana-configs.json

        - name: system-users
          projected:
            sources:
              - secret:
                  name: authelia-lldap
                  items:
                    - key: password
                      path: authelia
              - secret:
                  name: grafana-lldap
                  items:
                    - key: password
                      path: grafana

        - name: group-configs
          projected:
            sources:
              - secret:
                  name: lldap-bootstrap-configs
                  items:
                    - key: group-configs.json
                      path: group-configs.json