9efb353b83
This patchset aims to add HA Clustering support for Postgres. HA Clustering provides automatic failover in the event of the database going down in addition to keeping replicas of the database for rebuilding in the event of a node going down. To achieve this clustering we use [Patroni](https://github.com/zalando/patroni) which offers HA clustering support for Postgres. Patroni is a daemon that runs in the background and keeps track of which node in your cluster is currently the leader node and routes all traffic on the Postgresql endpoint to that node. If the leader node goes down, Patroni holds an election to chose a new leader and updates the endpoint to route traffic accordingly. All communication between nodes is done by a Patroni created endpoint, seperate from the externally facing Postgres endpoint. Note that, although the postgresql helm chart can be upgraded from non-patroni to patroni clustering, the previous `postgresql` endpoints object (which is not directly managed by helm) must be deleted via an out-of-band mechanism so that it may be replaced by the patroni-managed endpoints. If Postgres itself is leveraged for the deployment process, this must be done with careful timing. Note that the old endpoints had a port named "db", and the new endpoints has a port named "postgresql". - Picking up patchset: https://review.openstack.org/#/c/591663 Co-authored-by: Tony Sorrentino <as1413@att.com> Co-authored-by: Randeep Jalli <rj2083@att.com> Co-authored-by: Pete Birley <pete@port.direct> Co-authored-by: Matt McEuen <mm9745@att.com> Change-Id: I721b745017dc1ea7ae05dfd9f8d5dd08d0965985
114 lines
4.6 KiB
YAML
114 lines
4.6 KiB
YAML
{{/*
|
|
Copyright 2017 The Openstack-Helm Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/}}
|
|
|
|
{{- if .Values.manifests.cron_job_postgresql_backup }}
|
|
{{- $envAll := . }}
|
|
|
|
{{- $serviceAccountName := "postgresql-backup" }}
|
|
{{ tuple $envAll "postgresql_account" $serviceAccountName | include "helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount" }}
|
|
---
|
|
apiVersion: batch/v1beta1
|
|
kind: CronJob
|
|
metadata:
|
|
name: postgresql-backup
|
|
annotations:
|
|
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" }}
|
|
spec:
|
|
schedule: {{ .Values.jobs.backup_postgresql.cron | quote }}
|
|
successfulJobsHistoryLimit: {{ .Values.jobs.backup_postgresql.history.success }}
|
|
failedJobsHistoryLimit: {{ .Values.jobs.backup_postgresql.history.failed }}
|
|
concurrencyPolicy: Forbid
|
|
jobTemplate:
|
|
metadata:
|
|
labels:
|
|
{{ tuple $envAll "postgresql-backup" "backup" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
|
|
spec:
|
|
template:
|
|
metadata:
|
|
labels:
|
|
{{ tuple $envAll "postgresql-backup" "backup" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 12 }}
|
|
spec:
|
|
serviceAccountName: {{ $serviceAccountName }}
|
|
restartPolicy: OnFailure
|
|
nodeSelector:
|
|
{{ .Values.labels.job.node_selector_key }}: {{ .Values.labels.job.node_selector_value }}
|
|
containers:
|
|
- name: postgresql-backup
|
|
{{ tuple $envAll "postgresql_backup" | include "helm-toolkit.snippets.image" | indent 14 }}
|
|
{{ tuple $envAll $envAll.Values.pod.resources.jobs.postgresql_backup | include "helm-toolkit.snippets.kubernetes_resources" | indent 14 }}
|
|
command:
|
|
- /tmp/backup_postgresql.sh
|
|
env:
|
|
- name: POSTGRESQL_BACKUP_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: POSTGRES_PASSWORD
|
|
name: postgresql-admin
|
|
- name: POSTGRESQL_BACKUP_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: POSTGRES_USER
|
|
name: postgresql-admin
|
|
- name: POSTGRESQL_BACKUP_BASE_DIR
|
|
value: {{ .Values.conf.backup.base_path }}
|
|
- name: POSTGRESQL_BACKUP_PG_DUMPALL_OPTIONS
|
|
value: {{ .Values.conf.backup.pg_dumpall_options }}
|
|
- name: POSTGRESQL_BACKUP_DAYS_TO_KEEP
|
|
value: "{{ .Values.conf.backup.days_of_backup_to_keep }}"
|
|
- name: POSTGRESQL_POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
volumeMounts:
|
|
- name: pod-tmp
|
|
mountPath: /tmp
|
|
- mountPath: /tmp/backup_postgresql.sh
|
|
name: postgresql-bin
|
|
readOnly: true
|
|
subPath: backup_postgresql.sh
|
|
- mountPath: {{ .Values.conf.backup.base_path }}
|
|
name: postgresql-backup-dir
|
|
- name: postgresql-secrets
|
|
mountPath: /etc/postgresql/admin_user.conf
|
|
subPath: admin_user.conf
|
|
readOnly: true
|
|
restartPolicy: OnFailure
|
|
securityContext: {}
|
|
serviceAccount: {{ $serviceAccountName }}
|
|
serviceAccountName: {{ $serviceAccountName }}
|
|
volumes:
|
|
- name: pod-tmp
|
|
emptyDir: {}
|
|
- name: postgresql-secrets
|
|
secret:
|
|
secretName: postgresql-secrets
|
|
defaultMode: 0600
|
|
- name: postgresql-bin
|
|
secret:
|
|
secretName: postgresql-bin
|
|
defaultMode: 365
|
|
{{- if and .Values.volume.backup.enabled .Values.manifests.pvc_backup }}
|
|
- name: postgresql-backup-dir
|
|
persistentVolumeClaim:
|
|
claimName: postgresql-backup-data
|
|
{{- else }}
|
|
- hostPath:
|
|
path: {{ .Values.conf.backup.base_path }}
|
|
type: DirectoryOrCreate
|
|
name: postgresql-backup-dir
|
|
{{- end }}
|
|
{{- end }}
|