################################################################################
#   Copyright (c) 2019 AT&T Intellectual Property.                             #
#   Copyright (c) 2019 Nokia.                                                  #
#                                                                              #
#   Licensed under the Apache License, Version 2.0 (the "License");            #
#   you may not use this file except in compliance with the License.           #
#   You may obtain a copy of the License at                                    #
#                                                                              #
#       http://www.apache.org/licenses/LICENSE-2.0                             #
#                                                                              #
#   Unless required by applicable law or agreed to in writing, software        #
#   distributed under the License is distributed on an "AS IS" BASIS,          #
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.   #
#   See the License for the specific language governing permissions and        #
#   limitations under the License.                                             #
################################################################################

apiVersion: batch/v1
kind: Job
metadata:
  name: job-{{ include "common.fullname.nexus" . }}-save-certs
spec:
  template:
    spec:
      containers:
      - name: cert-copy
        image: alpine
        command: [ "/bin/sh","-c","cp -rL /var/run/dockercerts/..data/tls.crt /var/run/certs-copy/dockertls.crt && cp -rL /var/run/helmcerts/..data/tls.crt /var/run/certs-copy/helmtls.crt && cp -rL /var/run/nexuscerts/..data/tls.crt /var/run/certs-copy/nexustls.crt"]
        #        command: ["tail", "-f", "/dev/null"]
        volumeMounts:
        - name: dockercerts
          mountPath: /var/run/dockercerts
          readOnly: true
        - name: helmcerts
          mountPath: /var/run/helmcerts
          readOnly: true
        - name: nexuscerts
          mountPath: /var/run/nexuscerts
          readOnly: true
        - name:  write-to-volume
          mountPath: /var/run/certs-copy
      volumes:
      - name: dockercerts
        secret:
          secretName: secret-{{ include "common.name.nexus" . }}-docker
      - name: helmcerts
        secret:
          secretName: secret-{{ include "common.name.nexus" . }}-helm
      - name: nexuscerts
        secret:
          secretName: secret-{{ include "common.name.nexus" . }}-nexus
      - name: write-to-volume
        hostPath:
          path: /tmp
      restartPolicy: Never
  backoffLimit: 4