Skip to content

Commit 983de86

Browse files
dtapiacldtapiacl
committed
(openvpn) deploy mariadb operator
1 parent 45e6091 commit 983de86

File tree

12 files changed

+257
-0
lines changed

12 files changed

+257
-0
lines changed

‎fleet/lib/mariadb-operator/fleet.yaml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
---
2+
name: mariadb-operator
3+
defaultNamespace: &name mariadb-system
4+
namespaceLabels:
5+
lsst.io/discover: "true"
6+
labels:
7+
bundle: *name
8+
helm:
9+
chart: mariadb-operator
10+
releaseName: mariadb-operator
11+
repo: https://helm.mariadb.com/mariadb-operator
12+
version: 0.38.1
13+
waitForJobs: true
14+
timeoutSeconds: 900
15+
values:
16+
crds:
17+
enabled: true
18+
ha:
19+
enabled: true
20+
replicas: 2

‎fleet/lib/metallb-conf/overlays/ruka/ipaddresspool-openvpndb.yaml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
apiVersion: metallb.io/v1beta1
2+
kind: IPAddressPool
3+
metadata:
4+
name: openvpndb
5+
namespace: metallb-system
6+
spec:
7+
addresses:
8+
- 139.229.134.140/32
9+
- 139.229.134.145/32
10+
- 139.229.134.146/32
11+
autoAssign: false
12+
---
13+
apiVersion: metallb.io/v1beta1
14+
kind: L2Advertisement
15+
metadata:
16+
name: openvpndb
17+
namespace: metallb-system
18+
spec:
19+
ipAddressPools:
20+
- openvpndb

‎fleet/lib/openvpn-db-pre/base/external-secret-dockerhub.yaml‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
apiVersion: external-secrets.io/v1beta1
2+
kind: ExternalSecret
3+
metadata:
4+
name: dockerhub-secret
5+
namespace: openvpn-db
6+
spec:
7+
secretStoreRef:
8+
kind: ClusterSecretStore
9+
name: onepassword
10+
target:
11+
name: dockerhub-secret
12+
creationPolicy: Owner
13+
template:
14+
type: kubernetes.io/dockerconfigjson
15+
data:
16+
.dockerconfigjson: |
17+
{
18+
"auths": {
19+
"docker.io": {
20+
"username": "{{ .dockerhub_username }}",
21+
"password": "{{ .dockerhub_token }}",
22+
"auth": "{{ printf "%s:%s" .dockerhub_username .dockerhub_token | b64enc }}"
23+
}
24+
}
25+
}
26+
data:
27+
- secretKey: dockerhub_username
28+
remoteRef:
29+
key: lsstitadmin-docker-hub
30+
property: username
31+
- secretKey: dockerhub_token
32+
remoteRef:
33+
key: lsstitadmin-docker-hub
34+
property: docker hub api token

‎fleet/lib/openvpn-db-pre/base/external-secret-openvpndb.yaml‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
apiVersion: external-secrets.io/v1beta1
2+
kind: ExternalSecret
3+
metadata:
4+
name: mariadb
5+
namespace: openvpn-db
6+
spec:
7+
secretStoreRef:
8+
kind: ClusterSecretStore
9+
name: onepassword
10+
target:
11+
name: mariadb
12+
creationPolicy: Owner
13+
data:
14+
- secretKey: mariadb-root-password
15+
remoteRef:
16+
key: openvpn-mariadb-credentials
17+
property: mariadb-root-password
18+
- secretKey: mariadb-replication-password
19+
remoteRef:
20+
key: openvpn-mariadb-credentials
21+
property: mariadb-replication-password

‎fleet/lib/openvpn-db-pre/base/kustomization.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
resources:
2+
- external-secret-dockerhub.yaml
3+
- external-secret-openvpndb.yaml
4+
- mariadb-headless-service.yaml

‎fleet/lib/openvpn-db-pre/base/mariadb-headless-service.yaml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
name: mariadb-galera
5+
namespace: openvpn-db
6+
spec:
7+
clusterIP: None
8+
selector:
9+
app.kubernetes.io/name: mariadb
10+
ports:
11+
- protocol: TCP
12+
port: 3306
13+
targetPort: 3306

‎fleet/lib/openvpn-db-pre/fleet.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
defaultNamespace: openvpn-db
2+
labels:
3+
bundle: openvpn-db-pre
4+
name: openvpn-db-pre
5+
kustomize:
6+
dir: base

‎fleet/lib/openvpn-db/fleet.yaml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
defaultNamespace: &name openvpn-db
2+
labels:
3+
bundle: *name
4+
dependsOn:
5+
- name: mariadb-operator
6+
namespace: mariadb-system
7+
- name: openvpn-db-pre
8+
namespace: openvpn-db
9+
targetCustomizations:
10+
- name: ruka
11+
clusterSelector:
12+
matchExpressions:
13+
- key: management.cattle.io/cluster-display-name
14+
operator: In
15+
values:
16+
- ruka
17+
kustomize:
18+
dir: overlays/ruka

‎fleet/lib/openvpn-db/overlays/mariadb-cr.yaml‎

Lines changed: 118 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,118 @@
1+
apiVersion: k8s.mariadb.com/v1alpha1
2+
kind: MariaDB
3+
metadata:
4+
name: mariadb
5+
namespace: openvpn-db
6+
spec:
7+
replicas: 3
8+
galera:
9+
enabled: true
10+
primary:
11+
podIndex: 0
12+
automaticFailover: true
13+
sst: mariabackup
14+
rootPasswordSecretKeyRef:
15+
name: mariadb
16+
key: mariadb-root-password
17+
username: mariadb
18+
passwordSecretKeyRef:
19+
name: mariadb
20+
key: mariadb-root-password
21+
database: mariadb
22+
image: docker.io/library/mariadb:11.4.5
23+
imagePullPolicy: IfNotPresent
24+
imagePullSecrets:
25+
- name: dockerhub-secret
26+
storage:
27+
size: 100Gi
28+
storageClassName: rook-ceph-block
29+
connection:
30+
secretName: connection-mariadb
31+
secretTemplate:
32+
key: dsn
33+
healthCheck:
34+
interval: 10s
35+
retryInterval: 3s
36+
params:
37+
parseTime: "true"
38+
myCnf: |
39+
[mariadb]
40+
bind-address=*
41+
default_storage_engine=InnoDB
42+
binlog_format=row
43+
innodb_autoinc_lock_mode=2
44+
innodb_buffer_pool_size=1024M
45+
max_allowed_packet=256M
46+
[galera]
47+
wsrep_on=ON
48+
wsrep_provider=/usr/lib/galera/libgalera_smm.so
49+
wsrep_cluster_name=mariadb-galera
50+
wsrep_sst_method=mariabackup
51+
wsrep_cluster_address=gcomm://mariadb-galera.openvpn-db.svc.cluster.local
52+
resources:
53+
requests:
54+
cpu: 100m
55+
memory: 128Mi
56+
limits:
57+
cpu: 500m
58+
memory: 1Gi
59+
env:
60+
- name: MARIADB_ROOT_PASSWORD
61+
valueFrom:
62+
secretKeyRef:
63+
name: mariadb
64+
key: mariadb-root-password
65+
podSecurityContext:
66+
runAsUser: 0
67+
securityContext:
68+
allowPrivilegeEscalation: false
69+
livenessProbe:
70+
exec:
71+
command: ["bash", "-c", 'mariadb -u root -p"$MARIADB_ROOT_PASSWORD" -e "SELECT 1;"']
72+
periodSeconds: 10
73+
timeoutSeconds: 5
74+
readinessProbe:
75+
exec:
76+
command: ["bash", "-c", 'mariadb -u root -p"$MARIADB_ROOT_PASSWORD" -e "SELECT 1;"']
77+
periodSeconds: 10
78+
timeoutSeconds: 5
79+
startupProbe:
80+
exec:
81+
command: ["bash", "-c", 'mariadb -u root -p"$MARIADB_ROOT_PASSWORD" -e "SELECT 1;"']
82+
failureThreshold: 30
83+
periodSeconds: 10
84+
timeoutSeconds: 5
85+
podDisruptionBudget:
86+
maxUnavailable: 50%
87+
updateStrategy:
88+
type: ReplicasFirstPrimaryLast
89+
service:
90+
type: LoadBalancer
91+
metadata:
92+
annotations:
93+
metallb.universe.tf/address-pool: openvpndb
94+
loadBalancerIP: 139.229.134.140
95+
primaryService:
96+
type: LoadBalancer
97+
metadata:
98+
annotations:
99+
metallb.universe.tf/address-pool: openvpndb
100+
loadBalancerIP: 139.229.134.145
101+
secondaryService:
102+
type: LoadBalancer
103+
metadata:
104+
annotations:
105+
metallb.universe.tf/address-pool: openvpndb
106+
loadBalancerIP: 139.229.134.146
107+
affinity:
108+
podAntiAffinity:
109+
preferredDuringSchedulingIgnoredDuringExecution:
110+
- weight: 100
111+
podAffinityTerm:
112+
labelSelector:
113+
matchLabels:
114+
app.kubernetes.io/name: mariadb
115+
topologyKey: kubernetes.io/hostname
116+
metrics:
117+
enabled: true
118+
suspend: false

‎fleet/s/dev/c/ruka/mariadb-operator‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
../../../../lib/mariadb-operator

0 commit comments

Comments
 (0)