# n8n DB Init Job
# Creates n8n database and user in PostgreSQL.
# Run once before deploying n8n.
#
# Deploy:
#   kubectl create secret generic n8n-secret \
#     --namespace <ns> \
#     --from-literal=db-password='<password>'
#   kubectl apply -f n8n-db-init.yaml -n <ns>
#
# Watch completion:
#   kubectl get jobs -n <ns> -w
#   kubectl logs job/n8n-db-init -n <ns>

apiVersion: batch/v1
kind: Job
metadata:
  name: n8n-db-init
spec:
  template:
    spec:
      restartPolicy: OnFailure
      containers:
        - name: n8n-db-init
          image: postgres:16
          env:
            - name: PGPASSWORD
              valueFrom:
                secretKeyRef:
                  name: postgres-secret
                  key: password
            - name: N8N_DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: n8n-secret
                  key: db-password
          command:
            - /bin/sh
            - -c
            - |
              psql -h postgres -U postgres <<EOF
              CREATE USER n8n_user WITH PASSWORD '${N8N_DB_PASSWORD}';
              CREATE DATABASE n8n_db OWNER n8n_user;
              EOF