diff --git a/exemples/mariadb-replication/complete-mariadb-replication.yaml b/exemples/mariadb-replication/complete-mariadb-replication.yaml new file mode 100644 index 0000000..294b3b5 --- /dev/null +++ b/exemples/mariadb-replication/complete-mariadb-replication.yaml @@ -0,0 +1,168 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: mariadb-pv-0 +spec: + capacity: + storage: 300M + accessModes: + - ReadWriteOnce + hostPath: + path: "/mnt/data/mariadb-0" +--- +apiVersion: v1 +kind: PersistentVolume +metadata: + name: mariadb-pv-1 +spec: + capacity: + storage: 300M + accessModes: + - ReadWriteOnce + hostPath: + path: "/mnt/data/mariadb-1" +--- +apiVersion: v1 +kind: PersistentVolume +metadata: + name: mariadb-pv-2 +spec: + capacity: + storage: 300M + accessModes: + - ReadWriteOnce + hostPath: + path: "/mnt/data/mariadb-2" +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: mariadb-configmap +data: + primary.cnf: | + [mariadb] + log-bin # enable binary logging + log-basename=my-mariadb # independent of hostname changes + + replica.cnf: | + [mariadb] + log-basename=my-mariadb # independent of hostname changes + + primary.sql: | + CREATE USER 'repluser'@'%' IDENTIFIED BY 'replsecret'; + GRANT REPLICATION REPLICA ON *.* TO 'repluser'@'%'; + CREATE DATABASE primary_db; + + secondary.sql: | + CHANGE MASTER TO + MASTER_HOST='mariadb-sts-0.mariadb-service.default.svc.cluster.local', + MASTER_USER='repluser', + MASTER_PASSWORD='replsecret', + MASTER_CONNECT_RETRY=10; +--- +apiVersion: v1 +kind: Secret +metadata: + name: mariadb-secret +type: Opaque +data: + mariadb-root-password: c2VjcmV0 # echo -n 'secret'|base64 +--- +apiVersion: v1 +kind: Service +metadata: + name: mariadb-service + labels: + app: mariadb +spec: + ports: + - port: 3306 + name: mariadb-port + clusterIP: None + selector: + app: mariadb +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: mariadb-sts +spec: + serviceName: "mariadb-service" + replicas: 3 + selector: + matchLabels: + app: mariadb + template: + metadata: + labels: + app: mariadb + spec: + initContainers: + - name: init-mariadb + image: mariadb + imagePullPolicy: Always + command: + - bash + - "-c" + - | + set -ex + echo 'Starting init-mariadb'; + ls /mnt/config-map + [[ `hostname` =~ -([0-9]+)$ ]] || exit 1 + ordinal=${BASH_REMATCH[1]} + if [[ $ordinal -eq 0 ]]; then + cp /mnt/config-map/primary.cnf /etc/mysql/conf.d/server-id.cnf + cp /mnt/config-map/primary.sql /docker-entrypoint-initdb.d + else + cp /mnt/config-map/replica.cnf /etc/mysql/conf.d/server-id.cnf + cp /mnt/config-map/secondary.sql /docker-entrypoint-initdb.d + fi + echo server-id=$((3000 + $ordinal)) >> /etc/mysql/conf.d/server-id.cnf + ls /etc/mysql/conf.d/ + cat /etc/mysql/conf.d/server-id.cnf + volumeMounts: + - name: mariadb-config-map + mountPath: /mnt/config-map + - name: mariadb-config + mountPath: /etc/mysql/conf.d/ + - name: initdb + mountPath: /docker-entrypoint-initdb.d + restartPolicy: Always + containers: + - name: mariadb + image: mariadb + ports: + - containerPort: 3306 + name: mariadb-port + env: + - name: MARIADB_ROOT_PASSWORD + valueFrom: + secretKeyRef: + name: mariadb-secret + key: mariadb-root-password + - name: MYSQL_INITDB_SKIP_TZINFO + value: "1" + volumeMounts: + - name: datadir + mountPath: /var/lib/mysql/ + - name: mariadb-config + mountPath: /etc/mysql/conf.d/ + - name: initdb + mountPath: /docker-entrypoint-initdb.d + volumes: + - name: mariadb-config-map + configMap: + name: mariadb-configmap + - name: mariadb-config + emptyDir: {} + - name: initdb + emptyDir: {} + + volumeClaimTemplates: + - metadata: + name: datadir + spec: + accessModes: [ "ReadWriteOnce" ] + resources: + requests: + storage: 300M \ No newline at end of file diff --git a/exemples/mariadb-replication/mariadb-replication.yaml b/exemples/mariadb-replication/mariadb-replication.yaml index 59836c8..d06474b 100644 --- a/exemples/mariadb-replication/mariadb-replication.yaml +++ b/exemples/mariadb-replication/mariadb-replication.yaml @@ -1,6 +1,18 @@ # ConfigMap holding information about configuration files for primary/secondary and dockerinit apiVersion: v1 kind: ConfigMap +metadata: + name: mariadb-configmap +data: + + primary.cnf: | + [mariadb] + log-bin # enable binary logging + log-basename=my-mariadb # used to be independent of hostname changes (otherwise is in datadir/mysql) + + replica.cnf: |# ConfigMap holding information about configuration files for primary/secondary and dockerinit +apiVersion: v1 +kind: ConfigMap metadata: name: mariadb-configmap data: @@ -55,6 +67,151 @@ spec: selector: app: mariadb +# Statefulset +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: mariadb-sts +spec: + serviceName: "mariadb-service" + replicas: 3 + selector: + matchLabels: + app: mariadb + template: + metadata: + labels: + app: mariadb + spec: + initContainers: + - name: init-mariadb + image: mariadb + imagePullPolicy: Always + command: + - bash + - "-c" + - | + set -ex + echo 'Starting init-mariadb'; + # Check config map to directory that already exists + # (but must be used as a volume for main container) + ls /mnt/config-map + # Statefulset has sticky identity, number should be last + [[ `hostname` =~ -([0-9]+)$ ]] || exit 1 + ordinal=${BASH_REMATCH[1]} + # Copy appropriate conf.d files from config-map to + # mariadb-config volume (emptyDir) depending on pod number + if [[ $ordinal -eq 0 ]]; then + # This file holds SQL for connecting to primary + cp /mnt/config-map/primary.cnf /etc/mysql/conf.d/server-id.cnf + # Create the users needed for replication on primary on a volume + # initdb (emptyDir) + cp /mnt/config-map/primary.sql /docker-entrypoint-initdb.d + else + # This file holds SQL for connecting to secondary + cp /mnt/config-map/replica.cnf /etc/mysql/conf.d/server-id.cnf + # On replicas use secondary configuration on initdb volume + cp /mnt/config-map/secondary.sql /docker-entrypoint-initdb.d + fi + # Add an offset to avoid reserved server-id=0 value. + echo server-id=$((3000 + $ordinal)) >> etc/mysql/conf.d/server-id.cnf + ls /etc/mysql/conf.d/ + cat /etc/mysql/conf.d/server-id.cnf + volumeMounts: + - name: mariadb-config-map + mountPath: /mnt/config-map + - name: mariadb-config + mountPath: /etc/mysql/conf.d/ + - name: initdb + mountPath: /docker-entrypoint-initdb.d + restartPolicy: Always + containers: + - name: mariadb + image: mariadb + ports: + - containerPort: 3306 + name: mariadb-port + env: + # Using Secrets + - name: MARIADB_ROOT_PASSWORD + valueFrom: + secretKeyRef: + name: mariadb-secret + key: mariadb-root-password + - name: MYSQL_INITDB_SKIP_TZINFO + value: "1" + # Mount volume from persistent volume claim + volumeMounts: + - name: datadir + mountPath: /var/lib/mysql/ + - name: mariadb-config + mountPath: /etc/mysql/conf.d/ + - name: initdb + mountPath: /docker-entrypoint-initdb.d + volumes: + - name: mariadb-config-map + configMap: + name: mariadb-configmap + #defaultMode: 0544 + - name: mariadb-config + emptyDir: {} + - name: initdb + emptyDir: {} + + volumeClaimTemplates: + - metadata: + name: datadir + spec: + accessModes: [ "ReadWriteOnce" ] + resources: + requests: + storage: 300M + + [mariadb] + log-basename=my-mariadb # used to be independent of hostname changes (otherwise is in datadir/mysql) + + primary.sql: | + CREATE USER 'repluser'@'%' IDENTIFIED BY 'replsecret'; + GRANT REPLICATION REPLICA ON *.* TO 'repluser'@'%'; + CREATE DATABASE primary_db; + + secondary.sql: | + # We have to know name of sts (`mariadb-sts`) and + # service `mariadb-service` in advance as an FQDN. + # No need to use master_port + CHANGE MASTER TO + MASTER_HOST='mariadb-sts-0.mariadb-service.default.svc.cluster.local', + MASTER_USER='repluser', + MASTER_PASSWORD='replsecret', + MASTER_CONNECT_RETRY=10; + +# Secret holds information about root password +--- +apiVersion: v1 +kind: Secret +metadata: + name: mariadb-secret +type: Opaque +data: + mariadb-root-password: c2VjcmV0 # echo -n 'secret'|base64 + +# Headless service +--- +apiVersion: v1 +kind: Service +metadata: + name: mariadb-service + labels: + app: mariadb +spec: + ports: + - port: 3306 + name: mariadb-port + clusterIP: None + selector: + app: mariadb + # Statefulset --- apiVersion: apps/v1 diff --git a/shared/k3s.yaml b/shared/k3s.yaml index 85c23e8..218b7ee 100644 --- a/shared/k3s.yaml +++ b/shared/k3s.yaml @@ -1,7 +1,7 @@ apiVersion: v1 clusters: - cluster: - certificate-authority-data: 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 + certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJkekNDQVIyZ0F3SUJBZ0lCQURBS0JnZ3Foa2pPUFFRREFqQWpNU0V3SHdZRFZRUUREQmhyTTNNdGMyVnkKZG1WeUxXTmhRREUzT0RJeU1UUXhNVFV3SGhjTk1qWXdOakl6TVRBeU9ETTFXaGNOTXpZd05qSXdNVEF5T0RNMQpXakFqTVNFd0h3WURWUVFEREJock0zTXRjMlZ5ZG1WeUxXTmhRREUzT0RJeU1UUXhNVFV3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUait2c2RrOUtEb0JOalM5SzllOGY4MmJyTVQ5aXIyaGFLTVhKNGVaNmEKZHJjUzdKTk5Nc0VGNkhPNGljSElDTVcxVUNMQlczaHNweUJkdEQ2U0VIamJvMEl3UURBT0JnTlZIUThCQWY4RQpCQU1DQXFRd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBZEJnTlZIUTRFRmdRVWNCdkprSS9DNmZPcnVBTkpTZHVWClJOcHVMVFl3Q2dZSUtvWkl6ajBFQXdJRFNBQXdSUUlnRlQxN2JLdXdYbC9CT25pS3pON3hwelQrMVMzcE8zODIKeUovcXlLc3FydG9DSVFEWFBPeHcyY0JVd0JtOXgrd0JqMDlNdE0rTnByNkFVTUEyMHNVUncvd0lrUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K server: https://192.168.56.10:6443 name: default contexts: @@ -14,5 +14,5 @@ kind: Config users: - name: default user: - client-certificate-data: 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 - client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUtHMDFDMFhKejV0RXEzWFBiVk96elRIVGFaZEpSTURseTFiYmxZYWEyTVFvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVEtUQmpxdkI5OUZneTVhTXBORnpXd1lXaXVKQ1ROUXB1aWNIL3lKODVWN0lwSlh6dlZESwpLbXU0SnVuVFFYeHM0SVdwUlZQUWZnZ3l6TDVLRVg1V3RRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + client-certificate-data: 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 + client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUxNdDV3RkdtM2FpQXpPVXNvaEpTR1NEeTgvRDBxNVlRVGVLY3dOQkZMSmFvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFaDIyOVJpcllpUTg5QVBlM2NTNlNBY1I3Z2VXb2hOam43NTFxdStkTS9nL3JZdnFZNUc1cQo0aXBqcy80YlRhSEp1VEtZeHlzVkFvSy84cHBUYWgwTkFBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= diff --git a/shared/token b/shared/token index fae1c3f..d5ae97f 100644 --- a/shared/token +++ b/shared/token @@ -1 +1 @@ -K10a42da4eb88e6a8ec0891685919e285ba1edabab47b457c970632689e90f0d4e7::server:f80716bbdbe8e02f8fa108b0d51586ba +K10ee2edf67d7e5d5e98bb8556a5f5147d51486825db030acc7b99deaf75338960c::server:1e67de0a008c5e0a6d85880b34e83e3a