# Ghost DB Init Job
# Creates Ghost databases and users in MariaDB.
# Run once before deploying Ghost instances.
# Runs in default namespace — can access all secrets directly.
#
# Apply with:
#   kubectl apply -f ghost-db-init.yaml
#
# Watch completion:
#   kubectl get jobs -w
#   kubectl logs job/ghost-db-init

apiVersion: batch/v1
kind: Job
metadata:
  name: ghost-db-init
spec:
  template:
    spec:
      restartPolicy: OnFailure
      containers:
        - name: ghost-db-init
          image: mariadb:11
          env:
            - name: MARIADB_ROOT_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: mariadb-secret
                  key: root-password
            - name: GHOST1_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: ghost-secrets
                  key: ghost1-db-password
            - name: GHOST2_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: ghost-secrets
                  key: ghost2-db-password
            - name: GHOST3_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: ghost-secrets
                  key: ghost3-db-password
          command:
            - /bin/sh
            - -c
            - |
              mariadb -h mariadb -u root -p"${MARIADB_ROOT_PASSWORD}" <<EOF
              CREATE DATABASE IF NOT EXISTS ghost1_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
              CREATE DATABASE IF NOT EXISTS ghost2_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
              CREATE DATABASE IF NOT EXISTS ghost3_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
              CREATE USER IF NOT EXISTS 'ghost1_user'@'%' IDENTIFIED BY '${GHOST1_PASSWORD}';
              CREATE USER IF NOT EXISTS 'ghost2_user'@'%' IDENTIFIED BY '${GHOST2_PASSWORD}';
              CREATE USER IF NOT EXISTS 'ghost3_user'@'%' IDENTIFIED BY '${GHOST3_PASSWORD}';
              GRANT ALL ON ghost1_db.* TO 'ghost1_user'@'%';
              GRANT ALL ON ghost2_db.* TO 'ghost2_user'@'%';
              GRANT ALL ON ghost3_db.* TO 'ghost3_user'@'%';
              FLUSH PRIVILEGES;
              EOF