apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - ../migration patches: - target: group: batch version: v1 kind: Job name: voice-platform-migrate patch: |- - op: remove path: /spec/template/spec/containers/0/env - op: add path: /spec/template/spec/containers/0/command value: ["/bin/sh", "-ec"] - op: replace path: /spec/template/spec/containers/0/args value: - 'database_url=""; IFS= read -r database_url < /var/run/secrets/voice-platform/common/database-url || [ -n "$database_url" ]; exec migrate -path=/migrations -database "$database_url" up' - op: add path: /spec/template/spec/containers/0/volumeMounts value: - name: common-secrets mountPath: /var/run/secrets/voice-platform/common readOnly: true - op: add path: /spec/template/spec/volumes value: - name: common-secrets csi: driver: secrets-store.csi.k8s.io readOnly: true volumeAttributes: secretProviderClass: voice-platform-common