tot pujat

This commit is contained in:
2026-06-25 13:01:12 +02:00
parent df3caa929a
commit b15f1b239d
4 changed files with 329 additions and 4 deletions

View File

@@ -0,0 +1,168 @@
apiVersion: v1
kind: PersistentVolume
metadata:
name: mariadb-pv-0
spec:
capacity:
storage: 300M
accessModes:
- ReadWriteOnce
hostPath:
path: "/mnt/data/mariadb-0"
---
apiVersion: v1
kind: PersistentVolume
metadata:
name: mariadb-pv-1
spec:
capacity:
storage: 300M
accessModes:
- ReadWriteOnce
hostPath:
path: "/mnt/data/mariadb-1"
---
apiVersion: v1
kind: PersistentVolume
metadata:
name: mariadb-pv-2
spec:
capacity:
storage: 300M
accessModes:
- ReadWriteOnce
hostPath:
path: "/mnt/data/mariadb-2"
---
apiVersion: v1
kind: ConfigMap
metadata:
name: mariadb-configmap
data:
primary.cnf: |
[mariadb]
log-bin # enable binary logging
log-basename=my-mariadb # independent of hostname changes
replica.cnf: |
[mariadb]
log-basename=my-mariadb # independent of hostname changes
primary.sql: |
CREATE USER 'repluser'@'%' IDENTIFIED BY 'replsecret';
GRANT REPLICATION REPLICA ON *.* TO 'repluser'@'%';
CREATE DATABASE primary_db;
secondary.sql: |
CHANGE MASTER TO
MASTER_HOST='mariadb-sts-0.mariadb-service.default.svc.cluster.local',
MASTER_USER='repluser',
MASTER_PASSWORD='replsecret',
MASTER_CONNECT_RETRY=10;
---
apiVersion: v1
kind: Secret
metadata:
name: mariadb-secret
type: Opaque
data:
mariadb-root-password: c2VjcmV0 # echo -n 'secret'|base64
---
apiVersion: v1
kind: Service
metadata:
name: mariadb-service
labels:
app: mariadb
spec:
ports:
- port: 3306
name: mariadb-port
clusterIP: None
selector:
app: mariadb
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: mariadb-sts
spec:
serviceName: "mariadb-service"
replicas: 3
selector:
matchLabels:
app: mariadb
template:
metadata:
labels:
app: mariadb
spec:
initContainers:
- name: init-mariadb
image: mariadb
imagePullPolicy: Always
command:
- bash
- "-c"
- |
set -ex
echo 'Starting init-mariadb';
ls /mnt/config-map
[[ `hostname` =~ -([0-9]+)$ ]] || exit 1
ordinal=${BASH_REMATCH[1]}
if [[ $ordinal -eq 0 ]]; then
cp /mnt/config-map/primary.cnf /etc/mysql/conf.d/server-id.cnf
cp /mnt/config-map/primary.sql /docker-entrypoint-initdb.d
else
cp /mnt/config-map/replica.cnf /etc/mysql/conf.d/server-id.cnf
cp /mnt/config-map/secondary.sql /docker-entrypoint-initdb.d
fi
echo server-id=$((3000 + $ordinal)) >> /etc/mysql/conf.d/server-id.cnf
ls /etc/mysql/conf.d/
cat /etc/mysql/conf.d/server-id.cnf
volumeMounts:
- name: mariadb-config-map
mountPath: /mnt/config-map
- name: mariadb-config
mountPath: /etc/mysql/conf.d/
- name: initdb
mountPath: /docker-entrypoint-initdb.d
restartPolicy: Always
containers:
- name: mariadb
image: mariadb
ports:
- containerPort: 3306
name: mariadb-port
env:
- name: MARIADB_ROOT_PASSWORD
valueFrom:
secretKeyRef:
name: mariadb-secret
key: mariadb-root-password
- name: MYSQL_INITDB_SKIP_TZINFO
value: "1"
volumeMounts:
- name: datadir
mountPath: /var/lib/mysql/
- name: mariadb-config
mountPath: /etc/mysql/conf.d/
- name: initdb
mountPath: /docker-entrypoint-initdb.d
volumes:
- name: mariadb-config-map
configMap:
name: mariadb-configmap
- name: mariadb-config
emptyDir: {}
- name: initdb
emptyDir: {}
volumeClaimTemplates:
- metadata:
name: datadir
spec:
accessModes: [ "ReadWriteOnce" ]
resources:
requests:
storage: 300M

View File

@@ -1,6 +1,18 @@
# ConfigMap holding information about configuration files for primary/secondary and dockerinit
apiVersion: v1
kind: ConfigMap
metadata:
name: mariadb-configmap
data:
primary.cnf: |
[mariadb]
log-bin # enable binary logging
log-basename=my-mariadb # used to be independent of hostname changes (otherwise is in datadir/mysql)
replica.cnf: |# ConfigMap holding information about configuration files for primary/secondary and dockerinit
apiVersion: v1
kind: ConfigMap
metadata:
name: mariadb-configmap
data:
@@ -55,6 +67,151 @@ spec:
selector:
app: mariadb
# Statefulset
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: mariadb-sts
spec:
serviceName: "mariadb-service"
replicas: 3
selector:
matchLabels:
app: mariadb
template:
metadata:
labels:
app: mariadb
spec:
initContainers:
- name: init-mariadb
image: mariadb
imagePullPolicy: Always
command:
- bash
- "-c"
- |
set -ex
echo 'Starting init-mariadb';
# Check config map to directory that already exists
# (but must be used as a volume for main container)
ls /mnt/config-map
# Statefulset has sticky identity, number should be last
[[ `hostname` =~ -([0-9]+)$ ]] || exit 1
ordinal=${BASH_REMATCH[1]}
# Copy appropriate conf.d files from config-map to
# mariadb-config volume (emptyDir) depending on pod number
if [[ $ordinal -eq 0 ]]; then
# This file holds SQL for connecting to primary
cp /mnt/config-map/primary.cnf /etc/mysql/conf.d/server-id.cnf
# Create the users needed for replication on primary on a volume
# initdb (emptyDir)
cp /mnt/config-map/primary.sql /docker-entrypoint-initdb.d
else
# This file holds SQL for connecting to secondary
cp /mnt/config-map/replica.cnf /etc/mysql/conf.d/server-id.cnf
# On replicas use secondary configuration on initdb volume
cp /mnt/config-map/secondary.sql /docker-entrypoint-initdb.d
fi
# Add an offset to avoid reserved server-id=0 value.
echo server-id=$((3000 + $ordinal)) >> etc/mysql/conf.d/server-id.cnf
ls /etc/mysql/conf.d/
cat /etc/mysql/conf.d/server-id.cnf
volumeMounts:
- name: mariadb-config-map
mountPath: /mnt/config-map
- name: mariadb-config
mountPath: /etc/mysql/conf.d/
- name: initdb
mountPath: /docker-entrypoint-initdb.d
restartPolicy: Always
containers:
- name: mariadb
image: mariadb
ports:
- containerPort: 3306
name: mariadb-port
env:
# Using Secrets
- name: MARIADB_ROOT_PASSWORD
valueFrom:
secretKeyRef:
name: mariadb-secret
key: mariadb-root-password
- name: MYSQL_INITDB_SKIP_TZINFO
value: "1"
# Mount volume from persistent volume claim
volumeMounts:
- name: datadir
mountPath: /var/lib/mysql/
- name: mariadb-config
mountPath: /etc/mysql/conf.d/
- name: initdb
mountPath: /docker-entrypoint-initdb.d
volumes:
- name: mariadb-config-map
configMap:
name: mariadb-configmap
#defaultMode: 0544
- name: mariadb-config
emptyDir: {}
- name: initdb
emptyDir: {}
volumeClaimTemplates:
- metadata:
name: datadir
spec:
accessModes: [ "ReadWriteOnce" ]
resources:
requests:
storage: 300M
[mariadb]
log-basename=my-mariadb # used to be independent of hostname changes (otherwise is in datadir/mysql)
primary.sql: |
CREATE USER 'repluser'@'%' IDENTIFIED BY 'replsecret';
GRANT REPLICATION REPLICA ON *.* TO 'repluser'@'%';
CREATE DATABASE primary_db;
secondary.sql: |
# We have to know name of sts (`mariadb-sts`) and
# service `mariadb-service` in advance as an FQDN.
# No need to use master_port
CHANGE MASTER TO
MASTER_HOST='mariadb-sts-0.mariadb-service.default.svc.cluster.local',
MASTER_USER='repluser',
MASTER_PASSWORD='replsecret',
MASTER_CONNECT_RETRY=10;
# Secret holds information about root password
---
apiVersion: v1
kind: Secret
metadata:
name: mariadb-secret
type: Opaque
data:
mariadb-root-password: c2VjcmV0 # echo -n 'secret'|base64
# Headless service
---
apiVersion: v1
kind: Service
metadata:
name: mariadb-service
labels:
app: mariadb
spec:
ports:
- port: 3306
name: mariadb-port
clusterIP: None
selector:
app: mariadb
# Statefulset
---
apiVersion: apps/v1

View File

@@ -1,7 +1,7 @@
apiVersion: v1
clusters:
- cluster:
certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJkekNDQVIyZ0F3SUJBZ0lCQURBS0JnZ3Foa2pPUFFRREFqQWpNU0V3SHdZRFZRUUREQmhyTTNNdGMyVnkKZG1WeUxXTmhRREUzT0RJeU1EWXpNell3SGhjTk1qWXdOakl6TURneE9EVTJXaGNOTXpZd05qSXdNRGd4T0RVMgpXakFqTVNFd0h3WURWUVFEREJock0zTXRjMlZ5ZG1WeUxXTmhRREUzT0RJeU1EWXpNell3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRRWpZL3NFOUkwZ21ITmx1c0hNR25aVDBpV2pjaVIrWWZqdGxvMHVQbSsKditydlZUUnJEbmZZS1Nwd0JkQXdjb3JMeW5VcCtCTGdzYUs0cmhzYjh2c2lvMEl3UURBT0JnTlZIUThCQWY4RQpCQU1DQXFRd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBZEJnTlZIUTRFRmdRVVFENERFME5reHFrVjFleGtyVURhCjk0UlpLb1l3Q2dZSUtvWkl6ajBFQXdJRFNBQXdSUUlnVUU5c3A1dVg5SVRkZTd1ZmRmYzZCck1nYncvZ2tGclgKK3dLSE5kWDJWTTBDSVFETEZRQmZQeVN3RVp2YUxKS2lnTkQxWXI3TGI0SFBSbkhXcXVLVzh4aTlpdz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
certificate-authority-data: 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
server: https://192.168.56.10:6443
name: default
contexts:
@@ -14,5 +14,5 @@ kind: Config
users:
- name: default
user:
client-certificate-data: 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
client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUtHMDFDMFhKejV0RXEzWFBiVk96elRIVGFaZEpSTURseTFiYmxZYWEyTVFvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVEtUQmpxdkI5OUZneTVhTXBORnpXd1lXaXVKQ1ROUXB1aWNIL3lKODVWN0lwSlh6dlZESwpLbXU0SnVuVFFYeHM0SVdwUlZQUWZnZ3l6TDVLRVg1V3RRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
client-certificate-data: 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
client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUxNdDV3RkdtM2FpQXpPVXNvaEpTR1NEeTgvRDBxNVlRVGVLY3dOQkZMSmFvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFaDIyOVJpcllpUTg5QVBlM2NTNlNBY1I3Z2VXb2hOam43NTFxdStkTS9nL3JZdnFZNUc1cQo0aXBqcy80YlRhSEp1VEtZeHlzVkFvSy84cHBUYWgwTkFBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=

View File

@@ -1 +1 @@
K10a42da4eb88e6a8ec0891685919e285ba1edabab47b457c970632689e90f0d4e7::server:f80716bbdbe8e02f8fa108b0d51586ba
K10ee2edf67d7e5d5e98bb8556a5f5147d51486825db030acc7b99deaf75338960c::server:1e67de0a008c5e0a6d85880b34e83e3a