tot pujat

exemples/mariadb-replication/complete-mariadb-replication.yaml

@@ -0,0 +1,168 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: mariadb-pv-0
+spec:
+  capacity:
+    storage: 300M
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: "/mnt/data/mariadb-0"
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: mariadb-pv-1
+spec:
+  capacity:
+    storage: 300M
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: "/mnt/data/mariadb-1"
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: mariadb-pv-2
+spec:
+  capacity:
+    storage: 300M
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: "/mnt/data/mariadb-2"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mariadb-configmap
+data:
+  primary.cnf: |
+    [mariadb]
+    log-bin                         # enable binary logging
+    log-basename=my-mariadb         # independent of hostname changes
+
+  replica.cnf: |
+    [mariadb]
+    log-basename=my-mariadb         # independent of hostname changes
+
+  primary.sql: |
+    CREATE USER 'repluser'@'%' IDENTIFIED BY 'replsecret';
+    GRANT REPLICATION REPLICA ON *.* TO 'repluser'@'%';
+    CREATE DATABASE primary_db;
+
+  secondary.sql: |
+    CHANGE MASTER TO 
+    MASTER_HOST='mariadb-sts-0.mariadb-service.default.svc.cluster.local',
+    MASTER_USER='repluser',
+    MASTER_PASSWORD='replsecret',
+    MASTER_CONNECT_RETRY=10;
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mariadb-secret
+type: Opaque
+data:
+  mariadb-root-password: c2VjcmV0 # echo -n 'secret'|base64
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: mariadb-service
+  labels:
+    app: mariadb
+spec:
+  ports:
+  - port: 3306
+    name: mariadb-port
+  clusterIP: None
+  selector:
+    app: mariadb
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: mariadb-sts
+spec:
+  serviceName: "mariadb-service"
+  replicas: 3
+  selector:
+    matchLabels:
+      app: mariadb
+  template:
+    metadata:
+      labels:
+        app: mariadb
+    spec:
+      initContainers:
+      - name: init-mariadb
+        image: mariadb
+        imagePullPolicy: Always
+        command:
+        - bash
+        - "-c"
+        - |
+          set -ex
+          echo 'Starting init-mariadb';
+          ls /mnt/config-map
+          [[ `hostname` =~ -([0-9]+)$ ]] || exit 1
+          ordinal=${BASH_REMATCH[1]}
+          if [[ $ordinal -eq 0 ]]; then
+            cp /mnt/config-map/primary.cnf /etc/mysql/conf.d/server-id.cnf
+            cp /mnt/config-map/primary.sql /docker-entrypoint-initdb.d
+          else
+            cp /mnt/config-map/replica.cnf /etc/mysql/conf.d/server-id.cnf
+            cp /mnt/config-map/secondary.sql /docker-entrypoint-initdb.d
+          fi
+          echo server-id=$((3000 + $ordinal)) >> /etc/mysql/conf.d/server-id.cnf
+          ls /etc/mysql/conf.d/
+          cat /etc/mysql/conf.d/server-id.cnf
+        volumeMounts:
+          - name: mariadb-config-map
+            mountPath: /mnt/config-map
+          - name: mariadb-config
+            mountPath: /etc/mysql/conf.d/
+          - name: initdb
+            mountPath: /docker-entrypoint-initdb.d
+      restartPolicy: Always
+      containers:
+      - name: mariadb
+        image: mariadb
+        ports:
+        - containerPort: 3306
+          name: mariadb-port
+        env:
+        - name: MARIADB_ROOT_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: mariadb-secret
+              key: mariadb-root-password
+        - name: MYSQL_INITDB_SKIP_TZINFO
+          value: "1"
+        volumeMounts:
+        - name: datadir
+          mountPath: /var/lib/mysql/
+        - name: mariadb-config
+          mountPath: /etc/mysql/conf.d/
+        - name: initdb
+          mountPath: /docker-entrypoint-initdb.d
+      volumes:
+      - name: mariadb-config-map
+        configMap:
+          name: mariadb-configmap
+      - name: mariadb-config
+        emptyDir: {}
+      - name: initdb
+        emptyDir: {}
+
+  volumeClaimTemplates:
+  - metadata:
+      name: datadir
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 300M

exemples/mariadb-replication/mariadb-replication.yaml

@@ -1,6 +1,18 @@
 # ConfigMap holding information about configuration files for primary/secondary and dockerinit
 apiVersion: v1
 kind: ConfigMap
+metadata:
+  name: mariadb-configmap
+data:
+
+  primary.cnf: |
+    [mariadb]
+    log-bin                         # enable binary logging
+    log-basename=my-mariadb         # used to be independent of hostname changes (otherwise is in datadir/mysql)
+
+  replica.cnf: |# ConfigMap holding information about configuration files for primary/secondary and dockerinit
+apiVersion: v1
+kind: ConfigMap
 metadata:
   name: mariadb-configmap
 data:
@@ -55,6 +67,151 @@ spec:
   selector:
     app: mariadb
 
+# Statefulset
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: mariadb-sts
+spec:
+  serviceName: "mariadb-service"
+  replicas: 3
+  selector:
+    matchLabels:
+      app: mariadb
+  template:
+    metadata:
+      labels:
+        app: mariadb
+    spec:
+      initContainers:
+      - name: init-mariadb
+        image: mariadb
+        imagePullPolicy: Always
+        command:
+        - bash
+        - "-c"
+        - |
+          set -ex
+          echo 'Starting init-mariadb';
+          # Check config map to directory that already exists 
+          # (but must be used as a volume for main container)
+          ls /mnt/config-map
+          # Statefulset has sticky identity, number should be last
+          [[ `hostname` =~ -([0-9]+)$ ]] || exit 1
+          ordinal=${BASH_REMATCH[1]}
+          # Copy appropriate conf.d files from config-map to 
+          # mariadb-config volume (emptyDir) depending on pod number
+          if [[ $ordinal -eq 0 ]]; then
+            # This file holds SQL for connecting to primary
+            cp /mnt/config-map/primary.cnf /etc/mysql/conf.d/server-id.cnf
+            # Create the users needed for replication on primary on a volume
+            # initdb (emptyDir)
+            cp /mnt/config-map/primary.sql /docker-entrypoint-initdb.d
+          else
+            # This file holds SQL for connecting to secondary
+            cp /mnt/config-map/replica.cnf /etc/mysql/conf.d/server-id.cnf
+            # On replicas use secondary configuration on initdb volume
+            cp /mnt/config-map/secondary.sql /docker-entrypoint-initdb.d
+          fi
+          # Add an offset to avoid reserved server-id=0 value.
+          echo server-id=$((3000 + $ordinal)) >> etc/mysql/conf.d/server-id.cnf
+          ls /etc/mysql/conf.d/
+          cat /etc/mysql/conf.d/server-id.cnf
+        volumeMounts:
+          - name: mariadb-config-map
+            mountPath: /mnt/config-map
+          - name: mariadb-config
+            mountPath: /etc/mysql/conf.d/
+          - name: initdb
+            mountPath: /docker-entrypoint-initdb.d
+      restartPolicy: Always
+      containers:
+      - name: mariadb
+        image: mariadb
+        ports:
+        - containerPort: 3306
+          name: mariadb-port
+        env:
+        # Using Secrets
+        - name: MARIADB_ROOT_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: mariadb-secret
+              key: mariadb-root-password
+        - name: MYSQL_INITDB_SKIP_TZINFO
+          value: "1"
+        # Mount volume from persistent volume claim
+        volumeMounts:
+        - name: datadir
+          mountPath: /var/lib/mysql/
+        - name: mariadb-config
+          mountPath: /etc/mysql/conf.d/
+        - name: initdb
+          mountPath: /docker-entrypoint-initdb.d
+      volumes:
+      - name: mariadb-config-map
+        configMap:
+          name: mariadb-configmap
+          #defaultMode: 0544
+      - name: mariadb-config
+        emptyDir: {}
+      - name: initdb
+        emptyDir: {}
+
+  volumeClaimTemplates:
+  - metadata:
+      name: datadir
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 300M
+
+    [mariadb]
+    log-basename=my-mariadb         # used to be independent of hostname changes (otherwise is in datadir/mysql)
+
+  primary.sql: |
+    CREATE USER 'repluser'@'%' IDENTIFIED BY 'replsecret';
+    GRANT REPLICATION REPLICA ON *.* TO 'repluser'@'%';
+    CREATE DATABASE primary_db;
+
+  secondary.sql: |
+    # We have to know name of sts (`mariadb-sts`) and 
+    # service `mariadb-service` in advance as an FQDN.
+    # No need to use master_port
+    CHANGE MASTER TO 
+    MASTER_HOST='mariadb-sts-0.mariadb-service.default.svc.cluster.local',
+    MASTER_USER='repluser',
+    MASTER_PASSWORD='replsecret',
+    MASTER_CONNECT_RETRY=10;
+
+# Secret holds information about root password
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: mariadb-secret
+type: Opaque
+data:
+  mariadb-root-password: c2VjcmV0 # echo -n 'secret'|base64
+
+# Headless service
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: mariadb-service
+  labels:
+    app: mariadb
+spec:
+  ports:
+  - port: 3306
+    name: mariadb-port
+  clusterIP: None
+  selector:
+    app: mariadb
+
 # Statefulset
 ---
 apiVersion: apps/v1

shared/k3s.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 clusters:
 - cluster:
-    certificate-authority-data: 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
+    certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJkekNDQVIyZ0F3SUJBZ0lCQURBS0JnZ3Foa2pPUFFRREFqQWpNU0V3SHdZRFZRUUREQmhyTTNNdGMyVnkKZG1WeUxXTmhRREUzT0RJeU1UUXhNVFV3SGhjTk1qWXdOakl6TVRBeU9ETTFXaGNOTXpZd05qSXdNVEF5T0RNMQpXakFqTVNFd0h3WURWUVFEREJock0zTXRjMlZ5ZG1WeUxXTmhRREUzT0RJeU1UUXhNVFV3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUait2c2RrOUtEb0JOalM5SzllOGY4MmJyTVQ5aXIyaGFLTVhKNGVaNmEKZHJjUzdKTk5Nc0VGNkhPNGljSElDTVcxVUNMQlczaHNweUJkdEQ2U0VIamJvMEl3UURBT0JnTlZIUThCQWY4RQpCQU1DQXFRd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBZEJnTlZIUTRFRmdRVWNCdkprSS9DNmZPcnVBTkpTZHVWClJOcHVMVFl3Q2dZSUtvWkl6ajBFQXdJRFNBQXdSUUlnRlQxN2JLdXdYbC9CT25pS3pON3hwelQrMVMzcE8zODIKeUovcXlLc3FydG9DSVFEWFBPeHcyY0JVd0JtOXgrd0JqMDlNdE0rTnByNkFVTUEyMHNVUncvd0lrUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
     server: https://192.168.56.10:6443
   name: default
 contexts:
@@ -14,5 +14,5 @@ kind: Config
 users:
 - name: default
   user:
-    client-certificate-data: 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
+    client-certificate-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJrRENDQVRlZ0F3SUJBZ0lJY05Zcy80Wk9sTEF3Q2dZSUtvWkl6ajBFQXdJd0l6RWhNQjhHQTFVRUF3d1kKYXpOekxXTnNhV1Z1ZEMxallVQXhOemd5TWpFME1URTFNQjRYRFRJMk1EWXlNekV3TWpnek5Wb1hEVEkzTURZeQpNekV3TWpnek5Wb3dNREVYTUJVR0ExVUVDaE1PYzNsemRHVnRPbTFoYzNSbGNuTXhGVEFUQmdOVkJBTVRESE41CmMzUmxiVHBoWkcxcGJqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJJZHR2VVlxMklrUFBRRDMKdDNFdWtnSEVlNEhscUlUWTUrK2RhcnZuVFA0UDYyTDZtT1J1YXVJcVk3UCtHMDJoeWJreW1NY3JGUUtDdi9LYQpVMm9kRFFDalNEQkdNQTRHQTFVZER3RUIvd1FFQXdJRm9EQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0RBakFmCkJnTlZIU01FR0RBV2dCUnRwcXdkVGlZbXlYWWppdkdBcHFKVDROTnFPREFLQmdncWhrak9QUVFEQWdOSEFEQkUKQWlBTFhFdWI2RklNYmxCTHNsMC92a0tLaHBSRk5Od2hkNVAwRmdhcUU0Rkl6Z0lnWXZURm81MkIzR1Q5RWpsSwpMUTd1T1h1c3RhZDRJc3hjYzlVVlAzZVZsUE09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0KLS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJkekNDQVIyZ0F3SUJBZ0lCQURBS0JnZ3Foa2pPUFFRREFqQWpNU0V3SHdZRFZRUUREQmhyTTNNdFkyeHAKWlc1MExXTmhRREUzT0RJeU1UUXhNVFV3SGhjTk1qWXdOakl6TVRBeU9ETTFXaGNOTXpZd05qSXdNVEF5T0RNMQpXakFqTVNFd0h3WURWUVFEREJock0zTXRZMnhwWlc1MExXTmhRREUzT0RJeU1UUXhNVFV3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTeGJhRzY0MXMzL2s3NFp3USt5MWNJMU5mSFltYlVucWQ0VG93NFpyOVYKcGo4UmZWaUhodXltOUlNOFJraTVDVGJVTFd2L0Jhdi85Nk41bUdrVHRCdkhvMEl3UURBT0JnTlZIUThCQWY4RQpCQU1DQXFRd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBZEJnTlZIUTRFRmdRVWJhYXNIVTRtSnNsMkk0cnhnS2FpClUrRFRhamd3Q2dZSUtvWkl6ajBFQXdJRFNBQXdSUUlnWGZHUUtjbnFma3J4a1V1ZmhtYWk2QXNQU1RlL3l3RkkKaitPcGR5R2daUXNDSVFDYzg2OEpQODFmTjBJZEhLU3FYS3JzU2hjYW4zM3VTNkFPMlcvdXlzODlMdz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
-    client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUtHMDFDMFhKejV0RXEzWFBiVk96elRIVGFaZEpSTURseTFiYmxZYWEyTVFvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVEtUQmpxdkI5OUZneTVhTXBORnpXd1lXaXVKQ1ROUXB1aWNIL3lKODVWN0lwSlh6dlZESwpLbXU0SnVuVFFYeHM0SVdwUlZQUWZnZ3l6TDVLRVg1V3RRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
+    client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUxNdDV3RkdtM2FpQXpPVXNvaEpTR1NEeTgvRDBxNVlRVGVLY3dOQkZMSmFvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFaDIyOVJpcllpUTg5QVBlM2NTNlNBY1I3Z2VXb2hOam43NTFxdStkTS9nL3JZdnFZNUc1cQo0aXBqcy80YlRhSEp1VEtZeHlzVkFvSy84cHBUYWgwTkFBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=

shared/token

@@ -1 +1 @@
-K10a42da4eb88e6a8ec0891685919e285ba1edabab47b457c970632689e90f0d4e7::server:f80716bbdbe8e02f8fa108b0d51586ba
+K10ee2edf67d7e5d5e98bb8556a5f5147d51486825db030acc7b99deaf75338960c::server:1e67de0a008c5e0a6d85880b34e83e3a