feat(k8s): add init container

.gitlab-ci.yml

@@ -15,8 +15,8 @@ build-flyway:
     - echo -n $K8S_REGISTRY_PASSWORD | docker login -u $K8S_REGISTRY_USER --password-stdin $K8S_REGISTRY
     - docker build -t $K8S_REGISTRY_IMAGE_CRYPTO_FLYWAY -f Dockerfile.flyway .
     - docker push $K8S_REGISTRY_IMAGE_CRYPTO_FLYWAY
-#  rules:
-#    - if: '$CI_COMMIT_BRANCH == "develop"'
+  rules:
+    - if: '$CI_COMMIT_BRANCH == "develop"'
 
 build-docker:
   image: maven:3.8.3-adoptopenjdk-11

src/k8s/base/deployment.yml

@@ -13,6 +13,27 @@ spec:
       labels:
         app: submission-code-server
     spec:
+      initContainers:
+        - name: robert-submission-db-initializer
+          image: flyway-image
+          command: ["flyway", "migrate"]
+          env:
+            - name: FLYWAY_BASELINE_ON_MIGRATE
+              value: "true"
+            - name: FLYWAY_BASELINE_VERSION
+              value: "0"
+            - name: FLYWAY_USER
+              value: pocinit
+            - name: FLYWAY_URL
+              valueFrom:
+                secretKeyRef:
+                  name: submission-secrets
+                  key: SPRING_DATASOURCE_URL
+            - name: FLYWAY_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: submission-secrets
+                  key: SPRING_DATASOURCE_PASSWORD
       containers:
         - name: submission-app
           image: submission-image
@@ -37,17 +58,11 @@ spec:
                   key: SPRING_DATASOURCE_PASSWORD
             - name: SPRING_DATASOURCE_USERNAME
               value: pocinit
-            - name: SPRING_FLYWAY_ENABLED
-              value: "true"
-            - name: SPRING_FLYWAY_BASELINE_ON_MIGRATE
-              value: "true"
-            - name: SPRING_FLYWAY_BASELINE_VERSION
-              value: "0"
             - name: MANAGEMENT_SERVER_PORT
               value: "8081"
             - name: MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE
               value: health,info,prometheus
       nodeSelector:
-        caascad.io/nodepool: pod-ta
+        caascad.io/nodepool: "pod-tac"
       imagePullSecrets:
         - name: poc-inttac-poc-img-push-pull-secret