variant: fcos
version: 1.4.0
passwd:
  users:
    - name: splunk
    https://docs.fedoraproject.org/en-US/fedora-coreos/authentication/#_configuring_groups
storage:
  directories:
    - path: /home/splunk/.config
      user:
        name: splunk
      group:
        name: splunk
    - path: /home/splunk/.config/systemd
      user:
        name: splunk
      group:
        name: splunk
    - path: /home/splunk/.config/systemd/user
      user:
        name: splunk
      group:
        name: splunk
    - path: /home/splunk/.config/systemd/user/default.target.wants
      user:
        name: splunk
      group:
        name: splunk
    - path: /home/splunk/.config/containers
      user:
        name: splunk
      group:
        name: splunk
    - path: /home/splunk/.config/containers/systemd
      user:
        name: splunk
      group:
        name: splunk
  files:
    - path: /var/lib/systemd/linger/splunk
      mode: 0644
    - path: /home/splunk/.config/containers/systemd/splunk.container
      mode: 0644
      user:
        name: splunk
      group:
        name: splunk
      contents:
        inline: |
          [Unit]
          Description=Container for splunk
          After=build-splunk.service
          [Container]
          ContainerName=splunkforwarder-rhcos
          Image=localhost/splunkforwarder-rhcos:latest
          RunInit=true
          User=root
          Volume=/var/log/journal:/var/log/journal:ro
          Volume=/run/log/journal:/run/log/journal:ro
          Volume=/etc/machine-id:/etc/machine-id:ro
          Network=host
          PodmanArgs=--ipc=host --rm
          [Install]
          WantedBy=default.target
    - path: /home/splunk/.config/systemd/user/build-splunk.service
      mode: 0644
      user:
        name: splunk
      group:
        name: splunk
      contents:
        inline: |
          [Unit]
          Description=Build splunk container
          [Service]
          # Give time for the build to complete
          TimeoutStartSec=10m
          Type=oneshot
          RemainAfterExit=yes
          # Figure out soon if we can get the Red Hat Certs onto the hosts
          Environment=GIT_SSL_NO_VERIFY=1
          ExecStartPre=nm-online --timeout=30
          ExecStart=-podman build --pull-always --cache-ttl=480h -t localhost/splunkforwarder:latest https://gitlab.corp.redhat.com/paas/cicd.git#main:itpaas-util-images/splunkforwarder
          ExecStart=-podman build --build-arg project=rhcos-multiarch-builders --cache-ttl=480h --from localhost/splunkforwarder:latest -t localhost/splunkforwarder-rhcos:latest https://gitlab.corp.redhat.com/paas/docker-paas.git#master:splunk
          ExecStartPost=-podman image prune --force --filter until=720h
          [Install]
          WantedBy=default.target
  links:
    - path: /home/splunk/.config/systemd/user/default.target.wants/build-splunk.service
      user:
        name: splunk
      group:
        name: splunk
      target: /home/splunk/.config/systemd/user/build-splunk.service