Implementation of one-off jobs directory (canada-ca#2117)

* Initial implementation of one-off jobs directory and README

* Update README.md

* Update README.md

* Update scan-job.yaml

* Update README.md

* core.py fix and .yaml update to include secrets

Author: Ethanljf

app/jobs/README.md

@@ -0,0 +1,14 @@
+# One-off Jobs
+
+This directory contains manifests for the execution of one-off tasks that shouldn't be scheduled.
+
+E.g. Initiation of scans or core service outside of regularly scheduled execution.
+
+Deploying each file using `kubectl -n <namespace> -f <file>` will create a Kubernetes job which will only be performed once.
+
+
+## Additional considerations
+
+The naming scheme for these manifests should be <job_name>-job.yaml.
+
+The image tagging for manifests within this directory is not updated/managed by flux, so tags may be out of date and require periodic updates to ensure proper functionality.

app/jobs/core-job.yaml

@@ -0,0 +1,46 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: core-job
+spec:
+  template:
+    spec:
+      containers:
+      - name: scan
+        image: gcr.io/track-compliance/services/core
+        env:
+          - name: DB_USER
+            valueFrom:
+              secretKeyRef:
+                name: scanners
+                key: DB_USER
+          - name: DB_PASS
+            valueFrom:
+              secretKeyRef:
+                name: scanners
+                key: DB_PASS
+          - name: DB_HOST
+            valueFrom:
+              secretKeyRef:
+                name: scanners
+                key: DB_HOST
+          - name: DB_PORT
+            value: "8529"
+          - name: DB_NAME
+            valueFrom:
+              secretKeyRef:
+                name: scanners
+                key: DB_NAME
+          - name: REPO_NAME
+            value: "tracker"
+          - name: REPO_OWNER
+            value: "canada-ca"
+          - name: GUIDANCE_DIR
+            value: "guidance"
+          - name: GITHUB_TOKEN
+            valueFrom:
+              secretKeyRef:
+                name: scanners
+                key: GITHUB_TOKEN
+      restartPolicy: Never
+  backoffLimit: 4

app/jobs/scan-job.yaml

@@ -0,0 +1,35 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: scan-job
+spec:
+  template:
+    spec:
+      containers:
+      - name: scan
+        image: gcr.io/track-compliance/services/autoscan:master-05b22b2-1615242767
+        env:
+        - name: DB_USER
+          valueFrom:
+            secretKeyRef:
+              name: scanners
+              key: DB_USER
+        - name: DB_PASS
+          valueFrom:
+            secretKeyRef:
+              name: scanners
+              key: DB_PASS
+        - name: DB_HOST
+          valueFrom:
+            secretKeyRef:
+              name: scanners
+              key: DB_HOST
+        - name: DB_PORT
+          value: "8529"
+        - name: DB_NAME
+          valueFrom:
+            secretKeyRef:
+              name: scanners
+              key: DB_NAME
+      restartPolicy: Never
+  backoffLimit: 4

services/core/core.py

@@ -16,7 +16,7 @@
 DB_PASS = os.getenv("DB_PASS")
 DB_PORT = os.getenv("DB_PORT")
 DB_NAME = os.getenv("DB_NAME")
-DB_HOST = "10.108.14.82"
+DB_HOST = os.getenv("DB_HOST")
 REPO_NAME = os.getenv("REPO_NAME")
 REPO_OWNER = os.getenv("REPO_OWNER")
 GUIDANCE_DIR = os.getenv("GUIDANCE_DIR")