kubernetes/common/mariadb-galera/templates/statefulset.yaml

   1 {{/*
   2 # Copyright © 2018 Amdocs, Bell Canada
   3 # Copyright © 2019 Samsung Electronics
   4 # Copyright © 2019-2020 Orange
   5 # Copyright © 2020 Bitnami
   6 #
   7 # Licensed under the Apache License, Version 2.0 (the "License");
   8 # you may not use this file except in compliance with the License.
   9 # You may obtain a copy of the License at
  10 #
  11 #       http://www.apache.org/licenses/LICENSE-2.0
  12 #
  13 # Unless required by applicable law or agreed to in writing, software
  14 # distributed under the License is distributed on an "AS IS" BASIS,
  15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16 # See the License for the specific language governing permissions and
  17 # limitations under the License.
  18 */}}
  19
  20 apiVersion: apps/v1
  21 kind: StatefulSet
  22 metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
  23 spec:
  24   podManagementPolicy: {{ .Values.podManagementPolicy }}
  25   replicas: {{ .Values.replicaCount }}
  26   selector: {{- include "common.selectors" . | nindent 4 }}
  27   serviceName: {{ include "common.servicename" . }}-headless
  28   updateStrategy:
  29     type: {{ .Values.updateStrategy.type }}
  30     {{- if (eq "Recreate" .Values.updateStrategy.type) }}
  31     rollingUpdate: null
  32     {{- end }}
  33   template:
  34     metadata: {{- include "common.templateMetadata" . | nindent 6 }}
  35     spec:
  36       {{ include "common.podSecurityContext" . | indent 6  | trim }}
  37       initContainers:
  38         # we shouldn't need this but for unknown reason, it's fsGroup is not
  39         # applied
  40         - name: fix-permission
  41           command:
  42             - /bin/sh
  43           args:
  44             - -c
  45             - |
  46               chown -R {{ .Values.securityContext.user_id }}:{{ .Values.securityContext.group_id }} /data
  47               chown -R {{ .Values.securityContext.user_id }}:{{ .Values.securityContext.group_id }} /bootstrap/
  48               chown -R {{ .Values.securityContext.user_id }}:{{ .Values.securityContext.group_id }} /tmp/
  49               {{- if .Values.mariadbConfiguration }}
  50               cp /config/my.cnf /actual/my.cnf
  51               chown -R {{ .Values.securityContext.user_id }}:{{ .Values.securityContext.group_id }} /actual
  52               {{- end }}
  53           image: {{ include "repositoryGenerator.image.busybox" . }}
  54           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  55           securityContext:
  56             runAsUser: 0
  57           volumeMounts:
  58             - name: previous-boot
  59               mountPath: /bootstrap
  60             - name: mariadb-tmp-folder
  61               mountPath: /tmp
  62             - name: {{ include "common.fullname" . }}
  63               mountPath: /data
  64             {{- if .Values.mariadbConfiguration }}
  65             - name: mariadb-galera-starting-config
  66               mountPath: /config/my.cnf
  67               subPath: my.cnf
  68             - name: mariadb-galera-actual-config
  69               mountPath: /actual
  70             {{- end }}
  71       containers:
  72         - name: {{ include "common.name" . }}
  73           image: {{ include "repositoryGenerator.dockerHubRepository" . }}/{{ .Values.image }}
  74           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy | quote}}
  75           command:
  76             - bash
  77             - -ec
  78             - |
  79                 {{- if (not (empty (.Values.galera.bootstrap.bootstrapFromNode | quote)))}}
  80                 {{- $fullname := include "common.names.fullname" . }}
  81                 {{- $bootstrapFromNode := int .Values.galera.bootstrap.bootstrapFromNode }}
  82                 # Bootstrap from the indicated node
  83                 NODE_ID="${MY_POD_NAME#"{{ $fullname }}-"}"
  84                 if [[ "$NODE_ID" -eq "{{ $bootstrapFromNode }}" ]]; then
  85                     export MARIADB_GALERA_CLUSTER_BOOTSTRAP=yes
  86                     export MARIADB_GALERA_FORCE_SAFETOBOOTSTRAP={{ ternary "yes" "no" .Values.galera.bootstrap.forceSafeToBootstrap }}
  87                 fi
  88                 {{- end }}
  89                 exec /opt/bitnami/scripts/mariadb-galera/entrypoint.sh /opt/bitnami/scripts/mariadb-galera/run.sh
  90           env:
  91             - name: MY_POD_NAME
  92               valueFrom:
  93                 fieldRef:
  94                   fieldPath: metadata.name
  95             - name: BITNAMI_DEBUG
  96               value: {{ ternary "true" "false" .Values.debug | quote }}
  97             - name: MARIADB_INIT_SLEEP_TIME
  98               value: {{ .Values.init_sleep_time | quote }}
  99             - name: MARIADB_GALERA_CLUSTER_NAME
 100               value: {{ .Values.galera.name | quote }}
 101             - name: MARIADB_GALERA_CLUSTER_ADDRESS
 102               value: "gcomm://{{ template "common.name" . }}-headless.{{ include "common.namespace" . }}.svc.{{ .Values.global.clusterDomain }}"
 103             # Bitnami init script don't behave well in dual stack env.
 104             # set it here as long as https://github.com/bitnami/charts/issues/4077 is not solved.
 105             - name: MARIADB_GALERA_NODE_ADDRESS
 106               valueFrom:
 107                 fieldRef:
 108                   fieldPath: status.podIP
 109             - name: MARIADB_ROOT_USER
 110               value: {{ .Values.rootUser.user | quote }}
 111             - name: MARIADB_ROOT_PASSWORD
 112               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.rootPassUID" .) "key" "password") | indent 14 }}
 113             - name: MARIADB_USER
 114               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.userCredentialsUID" .) "key" "login") | indent 14 }}
 115             - name: MARIADB_PASSWORD
 116               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.userCredentialsUID" .) "key" "password") | indent 14 }}
 117             - name: MARIADB_DATABASE
 118               value: {{ .Values.db.name | quote }}
 119             - name: MARIADB_GALERA_MARIABACKUP_USER
 120               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.backupCredentialsUID" .) "key" "login") | indent 14 }}
 121             - name: MARIADB_GALERA_MARIABACKUP_PASSWORD
 122               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.backupCredentialsUID" .) "key" "password") | indent 14 }}
 123             {{- if .Values.extraFlags }}
 124             - name: MARIADB_EXTRA_FLAGS
 125               value: {{ .Values.extraFlags | quote }}
 126             {{- end }}
 127           ports: {{ include "common.containerPorts" . | nindent 12  }}
 128           {{- if .Values.livenessProbe.enabled }}
 129           livenessProbe:
 130             exec:
 131               command:
 132                 - sh
 133                 - -ec
 134                 - |
 135                   exec mysqladmin status -u$MARIADB_ROOT_USER -p$MARIADB_ROOT_PASSWORD
 136             initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
 137             periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
 138             timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
 139             successThreshold: {{ .Values.livenessProbe.successThreshold }}
 140             failureThreshold: {{ .Values.livenessProbe.failureThreshold }}
 141           {{- end }}
 142           {{- if .Values.readinessProbe.enabled }}
 143           readinessProbe:
 144             exec:
 145               command:
 146                 - sh
 147                 - -ec
 148                 - |
 149                   exec mysqladmin status -u$MARIADB_ROOT_USER -p$MARIADB_ROOT_PASSWORD
 150             initialDelaySeconds: {{ .Values.readinessProbe.initialDelaySeconds }}
 151             periodSeconds: {{ .Values.readinessProbe.periodSeconds }}
 152             timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }}
 153             successThreshold: {{ .Values.readinessProbe.successThreshold }}
 154             failureThreshold: {{ .Values.readinessProbe.failureThreshold }}
 155           {{- end }}
 156           {{- if .Values.startupProbe.enabled }}
 157           startupProbe:
 158             exec:
 159               command:
 160                 - sh
 161                 - -ec
 162                 - |
 163                   exec mysqladmin status -u$MARIADB_ROOT_USER -p$MARIADB_ROOT_PASSWORD
 164             initialDelaySeconds: {{ .Values.startupProbe.initialDelaySeconds }}
 165             periodSeconds: {{ .Values.startupProbe.periodSeconds }}
 166             timeoutSeconds: {{ .Values.startupProbe.timeoutSeconds }}
 167             successThreshold: {{ .Values.startupProbe.successThreshold }}
 168             failureThreshold: {{ .Values.startupProbe.failureThreshold }}
 169           {{- end }}
 170           resources: {{ include "common.resources" . | nindent 12 }}
 171           volumeMounts:
 172             - name: previous-boot
 173               mountPath: /opt/bitnami/mariadb/.bootstrap
 174             - name: {{ include "common.fullname" . }}
 175               mountPath: /bitnami/mariadb
 176             - name: mariadb-tmp-folder
 177               mountPath: /opt/bitnami/mariadb/tmp
 178             {{- if .Values.mariadbConfiguration }}
 179             - name: mariadb-galera-actual-config
 180               mountPath: /opt/bitnami/mariadb/conf
 181             {{- end }}
 182         {{- if default false .Values.global.metrics.enabled }}
 183         - name: {{ include "common.name" . }}-metrics
 184           image: {{ include "repositoryGenerator.dockerHubRepository" . }}/{{ .Values.metrics.image }}
 185           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.metrics.pullPolicy | quote}}
 186           env:
 187             - name: MARIADB_METRICS_EXTRA_FLAGS
 188               value: {{ default "" (join " " .Values.metrics.extraFlags) | quote }}
 189             - name: MARIADB_ROOT_USER
 190               value: {{ .Values.rootUser.user | quote }}
 191             - name: MARIADB_ROOT_PASSWORD
 192               {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" (include "common.mariadb.secret.rootPassUID" .) "key" "password") | indent 14}}
 193           command:
 194             - sh
 195             - -c
 196             - |
 197               DATA_SOURCE_NAME="$MARIADB_ROOT_USER:$MARIADB_ROOT_PASSWORD@(localhost:3306)/" /bin/mysqld_exporter $MARIADB_METRICS_EXTRA_FLAGS
 198           ports:
 199             - name: metrics
 200               containerPort: 9104
 201           livenessProbe:
 202             httpGet:
 203               path: /metrics
 204               port: metrics
 205             initialDelaySeconds: 30
 206             timeoutSeconds: 5
 207           readinessProbe:
 208             httpGet:
 209               path: /metrics
 210               port: metrics
 211             initialDelaySeconds: 5
 212             timeoutSeconds: 1
 213           {{ include "common.containerSecurityContext" . | indent 10 | trim }}
 214           resources: {{- toYaml .Values.metrics.resources | nindent 12 }}
 215         {{- end }}
 216       imagePullSecrets:
 217         - name: {{ include "common.namespace" . }}-docker-registry-key
 218       {{- if .Values.schedulerName }}
 219       schedulerName: {{ .Values.schedulerName | quote }}
 220       {{- end }}
 221       {{- if .Values.priorityClassName }}
 222       priorityClassName: {{ .Values.priorityClassName }}
 223       {{- end }}
 224       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 225       {{- if .Values.affinity }}
 226       affinity: {{- include "common.tplvalues" ( dict "value" .Values.affinity "context" $) | nindent 8 }}
 227       {{- else }}
 228       affinity:
 229         podAffinity: {{- include "common.affinities.pods" (dict "type" .Values.podAffinityPreset "context" $) | nindent 10 }}
 230         podAntiAffinity: {{- include "common.affinities.pods" (dict "type" .Values.podAntiAffinityPreset "context" $) | nindent 10 }}
 231         nodeAffinity: {{- include "common.affinities.nodes" (dict "type" .Values.nodeAffinityPreset.type "key" .Values.nodeAffinityPreset.key "values" .Values.nodeAffinityPreset.values) | nindent 10 }}
 232       {{- end }}
 233       {{- if .Values.nodeSelector }}
 234       nodeSelector: {{- include "common.tplvalues" ( dict "value" .Values.nodeSelector "context" $) | nindent 8 }}
 235       {{- end }}
 236       {{- if .Values.tolerations }}
 237       tolerations: {{- include "common.tplvalues" (dict "value" .Values.tolerations "context" .) | nindent 8 }}
 238       {{- end }}
 239       volumes:
 240         - name: previous-boot
 241           emptyDir: {}
 242         - name: mariadb-tmp-folder
 243           emptyDir: {}
 244         {{- if .Values.mariadbConfiguration  }}
 245         - name:  mariadb-galera-actual-config
 246           emptyDir: {}
 247         - name: mariadb-galera-starting-config
 248           configMap:
 249             name: {{ printf "%s-configuration" (include "common.fullname" .) }}
 250         {{- end }}
 251 {{- if and .Values.persistence.enabled .Values.persistence.existingClaim }}
 252         - name: {{ include "common.fullname" . }}
 253           persistentVolumeClaim:
 254             claimName: {{ .Values.persistence.existingClaim }}
 255 {{- else if not .Values.persistence.enabled }}
 256         - name: {{ include "common.fullname" . }}
 257           emptyDir: {}
 258 {{- else if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
 259   volumeClaimTemplates:
 260     - {{ include "common.PVCTemplate" (dict "dot" . "suffix" "data" "persistenceInfos" .Values.persistence) | indent 6 | trim }}
 261 {{- end }}