2 # Copyright © 2018 Amdocs, AT&T, Bell Canada
3 # Copyright © 2020 Samsung Electronics
5 # # Licensed under the Apache License, Version 2.0 (the "License");
6 # # you may not use this file except in compliance with the License.
7 # # You may obtain a copy of the License at
9 # # http://www.apache.org/licenses/LICENSE-2.0
11 # # Unless required by applicable law or agreed to in writing, software
12 # # distributed under the License is distributed on an "AS IS" BASIS,
13 # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 # # See the License for the specific language governing permissions and
15 # # limitations under the License.
18 {{- define "common.postgres.deployment" -}}
20 {{- $pgMode := .pgMode }}
24 name: {{ include "common.fullname" $dot }}-{{ $pgMode }}
25 namespace: {{ include "common.namespace" $dot }}
27 app: {{ include "common.name" $dot }}-{{ $pgMode }}
28 chart: {{ $dot.Chart.Name }}-{{ $dot.Chart.Version | replace "+" "_" }}
29 release: {{ include "common.release" $dot }}
30 heritage: {{ $dot.Release.Service }}
31 name: "{{ index $dot.Values "container" "name" $pgMode }}"
33 serviceName: {{ $dot.Values.service.name }}
37 app: {{ include "common.name" $dot }}-{{ $pgMode }}
41 app: {{ include "common.name" $dot }}-{{ $pgMode }}
42 release: {{ include "common.release" $dot }}
43 name: "{{ index $dot.Values "container" "name" $pgMode }}"
51 function prepare_password {
52 echo -n $1 | sed -e "s/'/''/g"
54 export PG_PRIMARY_PASSWORD=`prepare_password $PG_PRIMARY_PASSWORD_INPUT`;
55 export PG_PASSWORD=`prepare_password $PG_PASSWORD_INPUT`;
56 export PG_ROOT_PASSWORD=`prepare_password $PG_ROOT_PASSWORD_INPUT`;
57 cd /config-input && for PFILE in `ls -1 .`; do envsubst <${PFILE} >/config/${PFILE}; done
59 - name: PG_PRIMARY_USER
61 - name: PG_PRIMARY_PASSWORD_INPUT
62 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.primaryPasswordUID" .) "key" "password") | indent 10 }}
64 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.userCredentialsUID" .) "key" "login") | indent 10 }}
65 - name: PG_PASSWORD_INPUT
66 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.userCredentialsUID" .) "key" "password") | indent 10 }}
68 value: "{{ $dot.Values.config.pgDatabase }}"
69 - name: PG_ROOT_PASSWORD_INPUT
70 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.rootPassUID" .) "key" "password") | indent 10 }}
72 - mountPath: /config-input/setup.sql
77 image: "{{ $dot.Values.global.envsubstImage }}"
78 imagePullPolicy: {{ $dot.Values.global.pullPolicy | default $dot.Values.pullPolicy }}
79 name: {{ include "common.name" $dot }}-update-config
86 chown 26:26 /podroot/;
88 image: {{ $dot.Values.global.busyboxRepository | default $dot.Values.busyboxRepository }}/{{ $dot.Values.busyboxImage }}
89 imagePullPolicy: {{ $dot.Values.global.pullPolicy | default $dot.Values.pullPolicy }}
91 - name: {{ include "common.fullname" $dot }}-data
94 - name: {{ include "common.name" $dot }}
95 image: "{{ $dot.Values.postgresRepository }}/{{ $dot.Values.image }}"
96 imagePullPolicy: {{ $dot.Values.global.pullPolicy | default $dot.Values.pullPolicy }}
98 - containerPort: {{ $dot.Values.service.internalPort }}
99 name: {{ $dot.Values.service.portName }}
100 # disable liveness probe when breakpoints set in debugger
101 # so K8s doesn't restart unresponsive container
102 {{- if eq $dot.Values.liveness.enabled true }}
105 port: {{ $dot.Values.service.internalPort }}
106 initialDelaySeconds: {{ $dot.Values.liveness.initialDelaySeconds }}
107 periodSeconds: {{ $dot.Values.liveness.periodSeconds }}
108 timeoutSeconds: {{ $dot.Values.liveness.timeoutSeconds }}
112 port: {{ $dot.Values.service.internalPort }}
113 initialDelaySeconds: {{ $dot.Values.readiness.initialDelaySeconds }}
114 periodSeconds: {{ $dot.Values.readiness.periodSeconds }}
118 - name: PG_PRIMARY_USER
122 - name: PG_PRIMARY_HOST
123 value: "{{ $dot.Values.container.name.primary }}"
124 - name: PG_REPLICA_HOST
125 value: "{{ $dot.Values.container.name.replica }}"
126 - name: PG_PRIMARY_PORT
127 value: "{{ $dot.Values.service.internalPort }}"
128 - name: PG_PRIMARY_PASSWORD
129 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.primaryPasswordUID" .) "key" "password") | indent 10 }}
131 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.userCredentialsUID" .) "key" "login") | indent 10 }}
133 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.userCredentialsUID" .) "key" "password") | indent 10 }}
135 value: "{{ $dot.Values.config.pgDatabase }}"
136 - name: PG_ROOT_PASSWORD
137 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.rootPassUID" .) "key" "password") | indent 10 }}
140 mountPath: /pgconf/pool_hba.conf
141 subPath: pool_hba.conf
143 mountPath: /pgconf/setup.sql
146 name: {{ include "common.fullname" $dot }}-data
148 name: {{ include "common.fullname" $dot }}-backup
151 {{ include "common.resources" $dot | indent 12 }}
152 {{- if $dot.Values.nodeSelector }}
154 {{ toYaml $dot.Values.nodeSelector | indent 10 }}
156 {{- if $dot.Values.affinity }}
158 {{ toYaml $dot.Values.affinity | indent 10 }}
164 - name: {{ include "common.fullname" $dot }}-backup
166 - name: {{ include "common.fullname" $dot }}-data
167 {{- if $dot.Values.persistence.enabled }}
168 persistentVolumeClaim:
169 claimName: {{ include "common.fullname" $dot }}-{{ $pgMode }}
175 name: {{ include "common.fullname" $dot }}