From d76dd89679905332c5cfae3973a0b98773934f12 Mon Sep 17 00:00:00 2001
From: sg <spyros@ocurity.com>
Date: Thu, 8 Aug 2024 14:05:55 +0100
Subject: [PATCH] add resources and pull policy to the migrations job

---
 .../chart/templates/migrations-job.yaml                        | 3 +++
 deploy/deduplication-db-migrations/chart/values.yaml           | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/deploy/deduplication-db-migrations/chart/templates/migrations-job.yaml b/deploy/deduplication-db-migrations/chart/templates/migrations-job.yaml
index a142b2e02..23c26f970 100644
--- a/deploy/deduplication-db-migrations/chart/templates/migrations-job.yaml
+++ b/deploy/deduplication-db-migrations/chart/templates/migrations-job.yaml
@@ -22,6 +22,7 @@ spec:
       - name: enrichment-db-migrations
         # image.tag is set because you can't do helm upgrade and set the chart AppVersion manually
         image: "{{ default "ghcr.io/ocurity/dracon" .Values.image.registry }}/draconctl:{{ default .Chart.AppVersion .Values.image.tag }}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
         env:
           - name: DRACONCTL_MIGRATIONS_PATH
             value: "/etc/dracon/migrations/enrichment"
@@ -32,5 +33,7 @@ spec:
         - --url
         - "postgresql://{{ .Values.database.auth.username }}:{{ .Values.database.auth.password }}@{{ .Values.database.host }}/{{ .Values.database.auth.database }}?{{ .Values.database.auth.querystringargs}}"
         - ${DRACONCTL_MIGRATIONS_PATH}
+        resources:
+          {{- toYaml .Values.resources | nindent 12 }}
       serviceAccountName: {{ include "deduplication_db_migrations.fullname" . }}
 {{ end }}
diff --git a/deploy/deduplication-db-migrations/chart/values.yaml b/deploy/deduplication-db-migrations/chart/values.yaml
index f48b36e59..c594c5262 100644
--- a/deploy/deduplication-db-migrations/chart/values.yaml
+++ b/deploy/deduplication-db-migrations/chart/values.yaml
@@ -5,8 +5,10 @@
 image:
   # registry to use for all 
   registry: ""
+  pullPolicy: Always
 
 serviceAccount:
   create: false
 
 enabled: true
+resources: {}