Use Helm chart hooks for Jobs to initialize cluster resources (#2828)

* Rename cron job that updates the fonts

* Fix pull policy for create-admin-user

* Make ECR login job and update cert job chart hooks

deploy/helm/aws-login/templates/aws-ecr-login-oneshot.yaml

@@ -3,6 +3,11 @@ kind: Job
 metadata:
   name: "{{ .Values.awsEcr.jobName }}"
   namespace: {{ .Release.Namespace }}
+  annotations:
+    # This is what defines this resource as a hook. Without this line, the
+    # job is considered part of the release.
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": before-hook-creation
 spec:
   # keep completed jobs for 24 hrs so that logs are
   # available in case of issues

deploy/helm/cert-proxy-client/templates/update-cert-oneshot.yaml

@@ -3,6 +3,11 @@ kind: Job
 metadata:
   name: update-cert-oneshot
   namespace: {{ .Release.Namespace }}
+  annotations:
+    # This is what defines this resource as a hook. Without this line, the
+    # job is considered part of the release.
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": before-hook-creation
 spec:
   ttlSecondsAfterFinished: 300
   template:

deploy/helm/create-admin-user/templates/job-create-admin-user.yaml

@@ -3,6 +3,11 @@ kind: Job
 metadata:
   name: create-admin-user
   namespace: {{ .Release.Namespace }}
+  annotations:
+    # This is what defines this resource as a hook. Without this line, the
+    # job is considered part of the release.
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": before-hook-creation
 spec:
   ttlSecondsAfterFinished: 300
   template:

deploy/helm/create-admin-user/values.yaml

@@ -19,6 +19,7 @@ global:
   combineSmtpPassword: "Override"
   pullSecretName: aws-login-credentials
   imageTag: "latest"
+  imagePullPolicy: IfNotPresent
   # Define the type of image registry to use, awsEcr or local
   imageRegistry: awsEcr