2 # Copyright © 2018 Amdocs, AT&T, Bell Canada
3 # Copyright © 2020 Samsung Electronics
4 # Modifications Copyright (C) 2021 Bell Canada.
6 # # Licensed under the Apache License, Version 2.0 (the "License");
7 # # you may not use this file except in compliance with the License.
8 # # You may obtain a copy of the License at
10 # # http://www.apache.org/licenses/LICENSE-2.0
12 # # Unless required by applicable law or agreed to in writing, software
13 # # distributed under the License is distributed on an "AS IS" BASIS,
14 # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 # # See the License for the specific language governing permissions and
16 # # limitations under the License.
19 {{- define "common.postgres.deployment" -}}
21 {{- $pgMode := .pgMode }}
25 name: {{ include "common.fullname" $dot }}-{{ $pgMode }}
26 namespace: {{ include "common.namespace" $dot }}
28 app: {{ include "common.name" $dot }}-{{ $pgMode }}
29 chart: {{ $dot.Chart.Name }}-{{ $dot.Chart.Version | replace "+" "_" }}
30 release: {{ include "common.release" $dot }}
31 heritage: {{ $dot.Release.Service }}
32 name: "{{ index $dot.Values "container" "name" $pgMode }}"
37 app: {{ include "common.name" $dot }}-{{ $pgMode }}
41 app: {{ include "common.name" $dot }}-{{ $pgMode }}
42 release: {{ include "common.release" $dot }}
43 name: "{{ index $dot.Values "container" "name" $pgMode }}"
51 function prepare_password {
52 echo -n $1 | sed -e "s/'/''/g"
54 export PG_PRIMARY_PASSWORD=`prepare_password $PG_PRIMARY_PASSWORD_INPUT`;
55 export PG_PASSWORD=`prepare_password $PG_PASSWORD_INPUT`;
56 export PG_ROOT_PASSWORD=`prepare_password $PG_ROOT_PASSWORD_INPUT`;
57 cd /config-input && for PFILE in `ls -1 .`; do envsubst <${PFILE} >/config/${PFILE}; done
59 - name: PG_PRIMARY_USER
63 - name: PG_PRIMARY_PASSWORD_INPUT
64 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.primaryPasswordUID" .) "key" "password") | indent 10 }}
66 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.userCredentialsUID" .) "key" "login") | indent 10 }}
67 - name: PG_PASSWORD_INPUT
68 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.userCredentialsUID" .) "key" "password") | indent 10 }}
70 value: "{{ $dot.Values.config.pgDatabase }}"
71 - name: PG_ROOT_PASSWORD_INPUT
72 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.rootPassUID" .) "key" "password") | indent 10 }}
74 - mountPath: /config-input/setup.sql
79 image: {{ include "repositoryGenerator.image.envsubst" $dot }}
80 imagePullPolicy: {{ $dot.Values.global.pullPolicy | default $dot.Values.pullPolicy }}
81 name: {{ include "common.name" $dot }}-update-config
88 chown 26:26 /podroot/;
90 image: {{ include "repositoryGenerator.image.busybox" $dot }}
91 imagePullPolicy: {{ $dot.Values.global.pullPolicy | default $dot.Values.pullPolicy }}
93 - name: {{ include "common.fullname" $dot }}-data
96 - name: {{ include "common.name" $dot }}
97 image: {{ include "repositoryGenerator.image.postgres" $dot }}
98 imagePullPolicy: {{ $dot.Values.global.pullPolicy | default $dot.Values.pullPolicy }}
100 - containerPort: {{ $dot.Values.service.internalPort }}
101 name: {{ $dot.Values.service.portName }}
102 # disable liveness probe when breakpoints set in debugger
103 # so K8s doesn't restart unresponsive container
104 {{- if eq $dot.Values.liveness.enabled true }}
107 port: {{ $dot.Values.service.internalPort }}
108 initialDelaySeconds: {{ $dot.Values.liveness.initialDelaySeconds }}
109 periodSeconds: {{ $dot.Values.liveness.periodSeconds }}
110 timeoutSeconds: {{ $dot.Values.liveness.timeoutSeconds }}
114 port: {{ $dot.Values.service.internalPort }}
115 initialDelaySeconds: {{ $dot.Values.readiness.initialDelaySeconds }}
116 periodSeconds: {{ $dot.Values.readiness.periodSeconds }}
120 - name: PG_PRIMARY_USER
126 - name: PG_PRIMARY_HOST
127 value: "{{ $dot.Values.container.name.primary }}"
128 - name: PG_REPLICA_HOST
129 value: "{{ $dot.Values.container.name.replica }}"
130 - name: PG_PRIMARY_PORT
131 value: "{{ $dot.Values.service.internalPort }}"
132 - name: PG_PRIMARY_PASSWORD
133 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.primaryPasswordUID" .) "key" "password") | indent 10 }}
135 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.userCredentialsUID" .) "key" "login") | indent 10 }}
137 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.userCredentialsUID" .) "key" "password") | indent 10 }}
139 value: "{{ $dot.Values.config.pgDatabase }}"
140 - name: PG_ROOT_PASSWORD
141 {{- include "common.secret.envFromSecretFast" (dict "global" $dot "uid" (include "common.postgres.secret.rootPassUID" .) "key" "password") | indent 10 }}
142 - name: PGDATA_PATH_OVERRIDE
143 value: "{{ $dot.Values.config.pgDataPath }}"
146 mountPath: /pgconf/pool_hba.conf
147 subPath: pool_hba.conf
149 mountPath: /pgconf/setup.sql
152 name: {{ include "common.fullname" $dot }}-data
154 name: {{ include "common.fullname" $dot }}-backup
156 resources: {{ include "common.resources" $dot | nindent 12 }}
157 {{- if $dot.Values.nodeSelector }}
159 {{ toYaml $dot.Values.nodeSelector | indent 10 }}
161 {{- if $dot.Values.affinity }}
163 {{ toYaml $dot.Values.affinity | indent 10 }}
169 - name: {{ include "common.fullname" $dot }}-backup
171 - name: {{ include "common.fullname" $dot }}-data
172 {{- if $dot.Values.persistence.enabled }}
173 persistentVolumeClaim:
174 claimName: {{ include "common.fullname" $dot }}-{{ $pgMode }}
180 name: {{ include "common.fullname" $dot }}