kubernetes/common/mariadb-galera/templates/statefulset.yaml

   1 {{/*
   2 # Copyright © 2018 Amdocs
   3 # Copyright © 2018,2021 Bell Canada
   4 # Copyright © 2019 Samsung Electronics
   5 # Copyright © 2019-2020 Orange
   6 # Copyright © 2020 Bitnami
   7 #
   8 # Licensed under the Apache License, Version 2.0 (the "License");
   9 # you may not use this file except in compliance with the License.
  10 # You may obtain a copy of the License at
  11 #
  12 #       http://www.apache.org/licenses/LICENSE-2.0
  13 #
  14 # Unless required by applicable law or agreed to in writing, software
  15 # distributed under the License is distributed on an "AS IS" BASIS,
  16 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  17 # See the License for the specific language governing permissions and
  18 # limitations under the License.
  19 */}}
  20
  21 {{- if not .Values.global.mariadbGalera.useOperator }}
  22 apiVersion: apps/v1
  23 kind: StatefulSet
  24 metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
  25 spec:
  26   podManagementPolicy: {{ .Values.podManagementPolicy }}
  27   replicas: {{ .Values.replicaCount }}
  28   selector: {{- include "common.selectors" . | nindent 4 }}
  29   serviceName: {{ include "common.servicename" . }}-headless
  30   updateStrategy:
  31     type: {{ .Values.updateStrategy.type }}
  32     {{- if (eq "Recreate" .Values.updateStrategy.type) }}
  33     rollingUpdate: null
  34     {{- end }}
  35   template:
  36     metadata: {{- include "common.templateMetadata" . | nindent 6 }}
  37     spec:
  38       {{ include "common.podSecurityContext" . | indent 6  | trim }}
  39       initContainers:
  40         # we shouldn't need this but for unknown reason, it's fsGroup is not
  41         # applied
  42         - name: fix-permission
  43           command:
  44             - /bin/sh
  45           args:
  46             - -c
  47             - |
  48               chown -R {{ .Values.securityContext.user_id }}:{{ .Values.securityContext.group_id }} /data
  49               chown -R {{ .Values.securityContext.user_id }}:{{ .Values.securityContext.group_id }} /bootstrap/
  50               chown -R {{ .Values.securityContext.user_id }}:{{ .Values.securityContext.group_id }} /tmp/
  51               {{- if .Values.mariadbConfiguration }}
  52               cp /config/my.cnf /actual/my.cnf
  53               chown -R {{ .Values.securityContext.user_id }}:{{ .Values.securityContext.group_id }} /actual
  54               {{- end }}
  55           image: {{ include "repositoryGenerator.image.busybox" . }}
  56           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  57           securityContext:
  58             runAsUser: 0
  59           volumeMounts:
  60             - name: previous-boot
  61               mountPath: /bootstrap
  62             - name: mariadb-tmp-folder
  63               mountPath: /tmp
  64             - name: {{ include "common.fullname" . }}
  65               mountPath: /data
  66             {{- if .Values.mariadbConfiguration }}
  67             - name: mariadb-galera-starting-config
  68               mountPath: /config/my.cnf
  69               subPath: my.cnf
  70             - name: mariadb-galera-actual-config
  71               mountPath: /actual
  72             {{- end }}
  73       containers:
  74         - name: {{ include "common.name" . }}
  75           image: {{ include "repositoryGenerator.dockerHubRepository" . }}/{{ .Values.image }}
  76           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy | quote}}
  77           command:
  78             - bash
  79             - -ec
  80             - |
  81                 {{- if (not (empty (.Values.galera.bootstrap.bootstrapFromNode | quote)))}}
  82                 {{- $fullname := include "common.fullname" . }}
  83                 {{- $bootstrapFromNode := int .Values.galera.bootstrap.bootstrapFromNode }}
  84                 # Bootstrap from the indicated node
  85                 NODE_ID="${MY_POD_NAME#"{{ $fullname }}-"}"
  86                 if [[ "$NODE_ID" -eq "{{ $bootstrapFromNode }}" ]]; then
  87                     export MARIADB_GALERA_CLUSTER_BOOTSTRAP=yes
  88                     export MARIADB_GALERA_FORCE_SAFETOBOOTSTRAP={{ ternary "yes" "no" .Values.galera.bootstrap.forceSafeToBootstrap }}
  89                 fi
  90                 {{- end }}
  91                 exec /opt/bitnami/scripts/mariadb-galera/entrypoint.sh /opt/bitnami/scripts/mariadb-galera/run.sh
  92           env:
  93             - name: MY_POD_NAME
  94               valueFrom:
  95                 fieldRef:
  96                   fieldPath: metadata.name
  97             - name: BITNAMI_DEBUG
  98               value: {{ ternary "true" "false" .Values.debug | quote }}
  99             - name: MARIADB_INIT_SLEEP_TIME
 100               value: {{ .Values.init_sleep_time | quote }}
 101             - name: MARIADB_GALERA_CLUSTER_NAME
 102               value: {{ .Values.galera.name | quote }}
 103             - name: MARIADB_GALERA_CLUSTER_ADDRESS
 104               value: "gcomm://{{ template "common.name" . }}-headless.{{ include "common.namespace" . }}.svc.{{ .Values.global.clusterDomain }}"
 105             # Bitnami init script don't behave well in dual stack env.
 106             # set it here as long as https://github.com/bitnami/charts/issues/4077 is not solved.
 107             - name: MARIADB_GALERA_NODE_ADDRESS
 108               valueFrom:
 109                 fieldRef:
 110                   fieldPath: status.podIP
 111             - name: MARIADB_ROOT_USER
 112               value: {{ .Values.rootUser.user | quote }}
 113             - name: MARIADB_ROOT_PASSWORD
 114               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.rootPassUID" .) "key" "password") | indent 14 }}
 115             - name: MARIADB_USER
 116               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.userCredentialsUID" .) "key" "login") | indent 14 }}
 117             - name: MARIADB_PASSWORD
 118               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.userCredentialsUID" .) "key" "password") | indent 14 }}
 119             - name: MARIADB_DATABASE
 120               value: {{ .Values.db.name | quote }}
 121             - name: MARIADB_GALERA_MARIABACKUP_USER
 122               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.backupCredentialsUID" .) "key" "login") | indent 14 }}
 123             - name: MARIADB_GALERA_MARIABACKUP_PASSWORD
 124               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.backupCredentialsUID" .) "key" "password") | indent 14 }}
 125             {{- if .Values.extraFlags }}
 126             - name: MARIADB_EXTRA_FLAGS
 127               value: {{ .Values.extraFlags | quote }}
 128             {{- end }}
 129           ports: {{ include "common.containerPorts" . | nindent 12  }}
 130           {{- if .Values.livenessProbe.enabled }}
 131           livenessProbe:
 132             exec:
 133               command:
 134                 - sh
 135                 - -ec
 136                 - |
 137                   exec mysqladmin status -u$MARIADB_ROOT_USER -p$MARIADB_ROOT_PASSWORD
 138             initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
 139             periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
 140             timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
 141             successThreshold: {{ .Values.livenessProbe.successThreshold }}
 142             failureThreshold: {{ .Values.livenessProbe.failureThreshold }}
 143           {{- end }}
 144           {{- if .Values.readinessProbe.enabled }}
 145           readinessProbe:
 146             exec:
 147               command:
 148                 - sh
 149                 - -ec
 150                 - |
 151                   exec mysqladmin status -u$MARIADB_ROOT_USER -p$MARIADB_ROOT_PASSWORD
 152             initialDelaySeconds: {{ .Values.readinessProbe.initialDelaySeconds }}
 153             periodSeconds: {{ .Values.readinessProbe.periodSeconds }}
 154             timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }}
 155             successThreshold: {{ .Values.readinessProbe.successThreshold }}
 156             failureThreshold: {{ .Values.readinessProbe.failureThreshold }}
 157           {{- end }}
 158           {{- if .Values.startupProbe.enabled }}
 159           startupProbe:
 160             exec:
 161               command:
 162                 - sh
 163                 - -ec
 164                 - |
 165                   exec mysqladmin status -u$MARIADB_ROOT_USER -p$MARIADB_ROOT_PASSWORD
 166             initialDelaySeconds: {{ .Values.startupProbe.initialDelaySeconds }}
 167             periodSeconds: {{ .Values.startupProbe.periodSeconds }}
 168             timeoutSeconds: {{ .Values.startupProbe.timeoutSeconds }}
 169             successThreshold: {{ .Values.startupProbe.successThreshold }}
 170             failureThreshold: {{ .Values.startupProbe.failureThreshold }}
 171           {{- end }}
 172           resources: {{ include "common.resources" . | nindent 12 }}
 173           volumeMounts:
 174             - name: previous-boot
 175               mountPath: /opt/bitnami/mariadb/.bootstrap
 176             - name: {{ include "common.fullname" . }}
 177               mountPath: /bitnami/mariadb
 178             - name: mariadb-tmp-folder
 179               mountPath: /opt/bitnami/mariadb/tmp
 180             {{- if .Values.mariadbConfiguration }}
 181             - name: mariadb-galera-actual-config
 182               mountPath: /opt/bitnami/mariadb/conf
 183             {{- end }}
 184         {{- if default false .Values.global.metrics.enabled }}
 185         - name: {{ include "common.name" . }}-metrics
 186           image: {{ include "repositoryGenerator.dockerHubRepository" . }}/{{ .Values.metrics.image }}
 187           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.metrics.pullPolicy | quote}}
 188           env:
 189             - name: MARIADB_METRICS_EXTRA_FLAGS
 190               value: {{ default "" (join " " .Values.metrics.extraFlags) | quote }}
 191             - name: MARIADB_ROOT_USER
 192               value: {{ .Values.rootUser.user | quote }}
 193             - name: MARIADB_ROOT_PASSWORD
 194               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.rootPassUID" .) "key" "password") | indent 14}}
 195           command:
 196             - sh
 197             - -c
 198             - |
 199               DATA_SOURCE_NAME="$MARIADB_ROOT_USER:$MARIADB_ROOT_PASSWORD@(localhost:3306)/" /bin/mysqld_exporter $MARIADB_METRICS_EXTRA_FLAGS
 200           ports:
 201             - name: tcp-metrics
 202               containerPort: 9104
 203           livenessProbe:
 204             httpGet:
 205               path: /metrics
 206               port: tcp-metrics
 207             initialDelaySeconds: {{ .Values.metrics.livenessProbe.initialDelaySeconds }}
 208             periodSeconds: {{ .Values.metrics.livenessProbe.periodSeconds }}
 209             timeoutSeconds: {{ .Values.metrics.livenessProbe.timeoutSeconds }}
 210             successThreshold: {{ .Values.metrics.livenessProbe.successThreshold }}
 211             failureThreshold: {{ .Values.metrics.livenessProbe.failureThreshold }}
 212           readinessProbe:
 213             httpGet:
 214               path: /metrics
 215               port: tcp-metrics
 216             initialDelaySeconds: {{ .Values.metrics.readinessProbe.initialDelaySeconds }}
 217             periodSeconds: {{ .Values.metrics.readinessProbe.periodSeconds }}
 218             timeoutSeconds: {{ .Values.metrics.readinessProbe.timeoutSeconds }}
 219             successThreshold: {{ .Values.metrics.readinessProbe.successThreshold }}
 220             failureThreshold: {{ .Values.metrics.readinessProbe.failureThreshold }}
 221           {{ include "common.containerSecurityContext" . | indent 10 | trim }}
 222           resources: {{- toYaml .Values.metrics.resources | nindent 12 }}
 223         {{- end }}
 224       {{- include "common.imagePullSecrets" . | nindent 6 }}
 225       {{- if .Values.schedulerName }}
 226       schedulerName: {{ .Values.schedulerName | quote }}
 227       {{- end }}
 228       {{- if .Values.priorityClassName }}
 229       priorityClassName: {{ .Values.priorityClassName }}
 230       {{- end }}
 231       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 232       {{- if .Values.affinity }}
 233       affinity: {{- include "common.tplValue" ( dict "value" .Values.affinity "context" $) | nindent 8 }}
 234       {{- else }}
 235       affinity:
 236         podAffinity: {{- include "common.affinities.pods" (dict "type" .Values.podAffinityPreset "context" $) | nindent 10 }}
 237         podAntiAffinity: {{- include "common.affinities.pods" (dict "type" .Values.podAntiAffinityPreset "context" $) | nindent 10 }}
 238         nodeAffinity: {{- include "common.affinities.nodes" (dict "type" .Values.nodeAffinityPreset.type "key" .Values.nodeAffinityPreset.key "values" .Values.nodeAffinityPreset.values) | nindent 10 }}
 239       {{- end }}
 240       {{- if .Values.nodeSelector }}
 241       nodeSelector: {{- include "common.tplValue" ( dict "value" .Values.nodeSelector "context" $) | nindent 8 }}
 242       {{- end }}
 243       {{- if .Values.tolerations }}
 244       tolerations: {{- include "common.tplValue" (dict "value" .Values.tolerations "context" .) | nindent 8 }}
 245       {{- end }}
 246       volumes:
 247         - name: previous-boot
 248           emptyDir: {}
 249         - name: mariadb-tmp-folder
 250           emptyDir: {}
 251         {{- if .Values.mariadbConfiguration  }}
 252         - name:  mariadb-galera-actual-config
 253           emptyDir: {}
 254         - name: mariadb-galera-starting-config
 255           configMap:
 256             name: {{ printf "%s-configuration" (include "common.fullname" .) }}
 257         {{- end }}
 258 {{- if and .Values.persistence.enabled .Values.persistence.existingClaim }}
 259         - name: {{ include "common.fullname" . }}
 260           persistentVolumeClaim:
 261             claimName: {{ .Values.persistence.existingClaim }}
 262 {{- else if not .Values.persistence.enabled }}
 263         - name: {{ include "common.fullname" . }}
 264           emptyDir: {}
 265 {{- else if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
 266   volumeClaimTemplates:
 267     - {{ include "common.PVCTemplate" (dict "dot" . "suffix" "data" "persistenceInfos" .Values.persistence) | indent 6 | trim }}
 268 {{- end }}
 269 {{- end }}