80-bootstrap-domain.yaml

# One-shot bootstrap Job: seeds a single Direct domain into config-service.
#
# Why this is needed: direct-sta-sboot refuses to start if config-service returns
# zero domains (it throws ERROR=MissingDomains). This Job registers a placeholder
# domain so the STA (and the rest of the mail pipeline) can come up. It is
# idempotent — a 409 (domain already exists) is treated as success — so it is safe
# to leave in `kubectl apply -f .`.
#
# Change DOMAIN_NAME / edit via the config-ui for a real deployment; a running HISP
# still needs trust anchors, certificates and settings configured beyond this.
apiVersion: batch/v1
kind: Job
metadata:
  name: bootstrap-domain
  namespace: direct-project
spec:
  backoffLimit: 10
  ttlSecondsAfterFinished: 600
  template:
    metadata:
      labels:
        app: bootstrap-domain
    spec:
      restartPolicy: OnFailure
      containers:
        - name: seed
          image: curlimages/curl:8.11.1
          env:
            - name: CONFIG_URL
              value: "http://config-service:8080"
            - name: CONFIG_USER
              valueFrom:
                secretKeyRef:
                  name: bootstrap-domain-config
                  key: user
            - name: CONFIG_PASS
              valueFrom:
                secretKeyRef:
                  name: bootstrap-domain-config
                  key: password
            - name: DOMAIN_NAME
              valueFrom:
                secretKeyRef:
                  name: bootstrap-domain-config
                  key: domain
          command:
            - /bin/sh
            - -c
            - |
              set -eu
              echo "Waiting for config-service to be healthy..."
              until curl -sf "${CONFIG_URL}/actuator/health" >/dev/null; do
                sleep 3
              done
              echo "config-service is up. Registering domain ${DOMAIN_NAME}..."
              code=$(curl -s -o /tmp/body -w '%{http_code}' -X PUT \
                -u "${CONFIG_USER}:${CONFIG_PASS}" \
                -H 'Content-Type: application/json' \
                --data "{\"domainName\":\"${DOMAIN_NAME}\",\"status\":\"ENABLED\",\"postmasterAddress\":{\"emailAddress\":\"postmaster@${DOMAIN_NAME}\",\"displayName\":\"postmaster\",\"type\":\"postmaster\"}}" \
                "${CONFIG_URL}/domain")
              echo "HTTP ${code}"
              cat /tmp/body || true
              echo
              case "${code}" in
                2*|409) echo "Domain present. Done."; exit 0 ;;
                *) echo "Failed to register domain"; exit 1 ;;
              esac
---
apiVersion: v1
kind: Secret
metadata:
  name: bootstrap-domain-config
  namespace: direct-project
type: Opaque
stringData:
  user: admin
  password: "d1r3ct;"
  domain: direct.example.com