fix: make sure container get's stopped once job is done

forge-pod.yml

@@ -5,7 +5,7 @@ kind: Pod
 metadata:
   name: ublue-os_forge
 spec:
-  restartPolicy: Always
+  restartPolicy: OnFailure
   volumes:
     - name: ublue-os_forge-certs-pvc
       persistentVolumeClaim:
@@ -74,6 +74,11 @@ spec:
           subPath: ssh
           name: ublue-os_forge-certs-pvc
           readOnly: true
+      workingDir: /ansible
+      command:
+        - ansible-playbook
+      args:
+        - main.yml
       resources:
         limits:
           memory: 512Mi

setup/Containerfile

@@ -1,11 +1,7 @@
 # Source Image
 FROM docker.io/library/python:alpine3.17
 
-# Install ansible setup project
+# Install ansible and dependencies
 WORKDIR /ansible
 COPY ./ansible .
 RUN pip3 install -r ./requirements.txt
-RUN chmod +x ./startup.sh
-
-# Container start command
-CMD ["/ansible/startup.sh"]

setup/ansible/startup.sh

@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Run setup only once
-if [ ! -f /ansible/.startup-done ]; then
-    ansible-playbook main.yml
-    touch /ansible/.startup-done
-fi