Add db bootstrap and more template options to services template

service.nomad

@@ -15,6 +15,7 @@
 #   change_signal = str,
 #   left_delimiter = str,
 #   right_delimiter = str,
+#   mount = bool
 # )))
 # host_volumes = json(list(dict(
 #   name = str,
@@ -29,6 +30,15 @@
 # mysql = bool
 # redis = bool
 # vault = bool
+# mysql_bootstrap = json(dict(
+#   vault_key = str
+#   db_name = str
+#   db_name_key = str
+#   db_user = str
+#   db_user_key = str
+#   db_pass = str
+#   db_pass_key = str
+# ))
 job "[[.name]]" {
   region = "global"
   datacenters = ["dc1"]
@@ -139,20 +149,22 @@ job "[[.name]]" {
 
       config {
         image = "[[.image]]"
-        [[ if not (empty .service_port) -]]
+        [[ with .service_port -]]
         ports = ["main"]
         [[ end -]]
-        [[ if not (empty .args) -]]
+        [[ with .args -]]
-        args = ["[[ .args | parseJSON | join `", "` ]]"]
+        args = [[ . ]]
         [[ end -]]
 
         [[ with .templates -]]
         [[ range $t := . | parseJSON -]]
+        [[ if and (default true $t.mount) (not (default false $t.env))  -]]
         mount {
           type = "bind"
           target = "[[ $t.dest ]]"
-          source = "local/[[ $t.dest ]]"
+          source = "[[ default "local/" $t.dest_prefix ]][[ $t.dest ]]"
         }
+        [[ end -]]
         [[ end ]]
         [[ end -]]
       }
@@ -190,7 +202,7 @@ job "[[.name]]" {
         data = <<EOF
 [[ $t.data ]]
 EOF
-        destination = "local/[[ $t.dest ]]"
+        destination = "[[ default "local/" $t.dest_prefix ]][[ $t.dest ]]"
         [[ with $t.left_delimiter ]]left_delimiter = "[[ . ]]"[[ end -]]
         [[ with $t.right_delimiter ]]right_delimiter = "[[ . ]]"[[ end -]]
         [[ with $t.change_mode ]]change_mode = "[[ . ]]"[[ end -]]
@@ -207,5 +219,67 @@ EOF
       }
       [[ end -]]
     }
+    [[ with .mysql_bootstrap ]][[ with . | parseJSON -]]
+    task "[[$.name]]-bootstrap" {
+      driver = "docker"
+
+      lifecycle {
+        hook = "prestart"
+        sidecar = false
+      }
+
+      config {
+        image = "mysql:8"
+        args = [
+          "/bin/bash",
+          "-c",
+          "/usr/bin/mysql --defaults-extra-file=${NOMAD_SECRETS_DIR}/my.cnf < ${NOMAD_SECRETS_DIR}/bootstrap.sql",
+        ]
+      }
+
+      vault {
+        policies = [
+          "access-tables",
+          "nomad-task",
+        ]
+      }
+
+      template {
+        data = <<EOF
+[client]
+host={{ env "NOMAD_UPSTREAM_IP_mysql_server" }}
+port={{ env "NOMAD_UPSTREAM_PORT_mysql_server" }}
+user=root
+{{ with secret "kv/data/mysql" -}}
+password={{ .Data.data.root_password }}
+{{ end -}}
+        EOF
+        destination = "${NOMAD_SECRETS_DIR}/my.cnf"
+      }
+
+      template {
+        data = <<EOF
+{{ with secret "[[.vault_key]]" -}}
+{{ if .Data.data.[[.db_name_key]] -}}
+CREATE DATABASE IF NOT EXISTS `{{ .Data.data.[[.db_name_key]] }}`
+  CHARACTER SET = 'utf8mb4'
+  COLLATE = 'utf8mb4_unicode_ci';
+CREATE USER IF NOT EXISTS '{{ .Data.data.[[.db_user_key]] }}'@'%'
+  IDENTIFIED BY '{{ .Data.data.[[.db_pass_key]] }}';
+GRANT ALL ON `{{ .Data.data.[[.db_name_key]] }}`.* to '{{ .Data.data.[[.db_user_key]] }}'@'%';
+{{ else -}}
+SELECT 'NOOP';
+{{ end -}}
+{{ end -}}
+        EOF
+        destination = "${NOMAD_SECRETS_DIR}/bootstrap.sql"
+      }
+
+      resources {
+        cpu = 50
+        memory = 50
+      }
+    }
+    [[ end -]][[ end -]]
   }
 }