forked from k-space/kube
rm replaced-unused mysql-operator
This commit is contained in:
parent
480ff4f426
commit
a250363bb0
@ -1,8 +0,0 @@
|
||||
# Oracle MySQL operator
|
||||
|
||||
We have switched to MariaDB operator and this is not actually deployed in the cluster anymore
|
||||
|
||||
```
|
||||
helm template mysql-operator mysql-operator/mysql-operator --namespace mysql-operator --include-crds > application.yml
|
||||
kubectl apply -n mysql-operator -f application.yml -f application-extras.yml -f networkpolicy-base.yml
|
||||
```
|
||||
@ -1,18 +0,0 @@
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: NetworkPolicy
|
||||
metadata:
|
||||
name: mysql-operator
|
||||
spec:
|
||||
podSelector: {}
|
||||
policyTypes:
|
||||
- Egress
|
||||
egress:
|
||||
- # TODO: Not sure why mysql-operator needs to be able to connect
|
||||
to:
|
||||
- namespaceSelector: {}
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 33060
|
||||
- protocol: TCP
|
||||
port: 3306
|
||||
@ -1,608 +0,0 @@
|
||||
---
|
||||
# Source: crds/crd.yaml
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: innodbclusters.mysql.oracle.com
|
||||
spec:
|
||||
group: mysql.oracle.com
|
||||
versions:
|
||||
- name: v2
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
required: ["spec"]
|
||||
properties:
|
||||
metadata:
|
||||
type: object
|
||||
properties:
|
||||
name:
|
||||
type: string
|
||||
maxLength: 40
|
||||
spec:
|
||||
type: object
|
||||
required: ["secretName"]
|
||||
properties:
|
||||
secretName:
|
||||
type: string
|
||||
description: "Name of a generic type Secret containing root/default account password"
|
||||
tlsCASecretName:
|
||||
type: string
|
||||
description: "Name of a generic type Secret containing CA (ca.pem) and optional CRL (crl.pem) for SSL"
|
||||
tlsSecretName:
|
||||
type: string
|
||||
description: "Name of a TLS type Secret containing Server certificate and private key for SSL"
|
||||
tlsUseSelfSigned:
|
||||
type: boolean
|
||||
default: false
|
||||
description: "Enables use of self-signed TLS certificates, reducing or disabling TLS based security verifications"
|
||||
version:
|
||||
type: string
|
||||
pattern: '^\d+\.\d+\.\d+(-.+)?'
|
||||
description: "MySQL Server version"
|
||||
edition:
|
||||
type: string
|
||||
pattern: "^(community|enterprise)$"
|
||||
description: "MySQL Server Edition (community or enterprise)"
|
||||
imageRepository:
|
||||
type: string
|
||||
description: "Repository from where images must be pulled from; defaults to mysql for community and container-registry.oracle.com/mysql for enterprise"
|
||||
imagePullPolicy:
|
||||
type: string
|
||||
description: "Defaults to Always, but set to IfNotPresent in deploy-operator.yaml when deploying Operator"
|
||||
imagePullSecrets:
|
||||
type: array
|
||||
items:
|
||||
type: object
|
||||
properties:
|
||||
name:
|
||||
type: string
|
||||
serviceAccountName:
|
||||
type: string
|
||||
baseServerId:
|
||||
type: integer
|
||||
minimum: 0
|
||||
maximum: 4294967195
|
||||
default: 1000
|
||||
description: "Base value for MySQL server_id for instances in the cluster"
|
||||
datadirVolumeClaimTemplate:
|
||||
type: object
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
description: "Template for a PersistentVolumeClaim, to be used as datadir"
|
||||
mycnf:
|
||||
type: string
|
||||
description: "Custom configuration additions for my.cnf"
|
||||
instances:
|
||||
type: integer
|
||||
minimum: 1
|
||||
maximum: 9
|
||||
default: 1
|
||||
description: "Number of MySQL replica instances for the cluster"
|
||||
podSpec:
|
||||
type: object
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
initDB:
|
||||
type: object
|
||||
properties:
|
||||
clone:
|
||||
type: object
|
||||
required: ["donorUrl", "secretKeyRef"]
|
||||
properties:
|
||||
donorUrl:
|
||||
type: string
|
||||
description: "URL of the cluster to clone from"
|
||||
rootUser:
|
||||
type: string
|
||||
default: "root"
|
||||
description: "User name used for cloning"
|
||||
secretKeyRef:
|
||||
type: object
|
||||
required: ["name"]
|
||||
properties:
|
||||
name:
|
||||
type: string
|
||||
description: "Secret name with key 'rootPassword' storing the password for the user specified in rootUser"
|
||||
dump:
|
||||
type: object
|
||||
required: ["storage"]
|
||||
properties:
|
||||
name:
|
||||
type: string
|
||||
description: "Name of the dump. Not used by the operator, but a descriptive hint for the cluster administrator"
|
||||
path:
|
||||
type: string
|
||||
description: "Path to the dump in the PVC. Use when specifying persistentVolumeClaim. Omit for ociObjectStorage."
|
||||
storage:
|
||||
type: object
|
||||
properties:
|
||||
ociObjectStorage:
|
||||
type: object
|
||||
required: ["bucketName", "prefix", "credentials"]
|
||||
properties:
|
||||
bucketName:
|
||||
type: string
|
||||
description: "Name of the bucket where the dump is stored"
|
||||
prefix:
|
||||
type: string
|
||||
description: "Path in the bucket where the dump files are stored"
|
||||
credentials:
|
||||
type: string
|
||||
description: "Secret name with data for accessing the bucket"
|
||||
persistentVolumeClaim:
|
||||
type: object
|
||||
description : "Specification of the PVC to be used. Used 'as is' in the cloning pod."
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
router:
|
||||
type: object
|
||||
description: "MySQL Router specification"
|
||||
properties:
|
||||
instances:
|
||||
type: integer
|
||||
minimum: 0
|
||||
default: 1
|
||||
description: "Number of MySQL Router instances to deploy"
|
||||
tlsSecretName:
|
||||
type: string
|
||||
description: "Name of a TLS type Secret containing MySQL Router certificate and private key used for SSL"
|
||||
version:
|
||||
type: string
|
||||
pattern: '^\d+\.\d+\.\d+(-.+)?'
|
||||
description: "Override MySQL Router version"
|
||||
podSpec:
|
||||
type: object
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
backupProfiles:
|
||||
type: array
|
||||
description: "Backup profile specifications for the cluster, which can be referenced from backup schedules and one-off backup jobs"
|
||||
items:
|
||||
type: object
|
||||
required: ["name"]
|
||||
properties:
|
||||
name:
|
||||
type: string
|
||||
description: "Embedded backup profile, referenced as backupProfileName elsewhere"
|
||||
dumpInstance:
|
||||
type: object
|
||||
properties:
|
||||
dumpOptions:
|
||||
type: object
|
||||
description: "A dictionary of key-value pairs passed directly to MySQL Shell's DumpInstance()"
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
storage:
|
||||
type: object
|
||||
properties:
|
||||
ociObjectStorage:
|
||||
type: object
|
||||
required: ["bucketName", "prefix", "credentials"]
|
||||
properties:
|
||||
bucketName:
|
||||
type: string
|
||||
description: "Bucket name where backup is stored"
|
||||
prefix:
|
||||
type: string
|
||||
description: "Path in bucket where backup is stored"
|
||||
credentials:
|
||||
type: string
|
||||
description: "Secret name with data for accessing the bucket"
|
||||
persistentVolumeClaim:
|
||||
type: object
|
||||
description : "Specification of the PVC to be used. Used 'as is' in pod executing the backup."
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
snapshot:
|
||||
type: object
|
||||
properties:
|
||||
storage:
|
||||
type: object
|
||||
properties:
|
||||
ociObjectStorage:
|
||||
type: object
|
||||
required: ["bucketName", "prefix", "credentials"]
|
||||
properties:
|
||||
bucketName:
|
||||
type: string
|
||||
description: "Bucket name where backup is stored"
|
||||
prefix:
|
||||
type: string
|
||||
description: "Path in bucket where backup is stored"
|
||||
credentials:
|
||||
type: string
|
||||
description: "Secret name with data for accessing the bucket"
|
||||
persistentVolumeClaim:
|
||||
type: object
|
||||
description : "Specification of the PVC to be used. Used 'as is' in pod executing the backup."
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
backupSchedules:
|
||||
type: array
|
||||
description: "Schedules for periodically executed backups"
|
||||
items:
|
||||
type: object
|
||||
required: ["name", "schedule"]
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
properties:
|
||||
name:
|
||||
type: string
|
||||
description: "Name of the backup schedule"
|
||||
schedule:
|
||||
type: string
|
||||
description: "The schedule of the job, syntax as a cron expression"
|
||||
backupProfileName:
|
||||
type: string
|
||||
description: "Name of the backupProfile to be used"
|
||||
backupProfile:
|
||||
type: object
|
||||
description: "backupProfile specification if backupProfileName is not specified"
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deleteBackupData:
|
||||
type: boolean
|
||||
default: false
|
||||
description: "Whether to delete the backup data in case the MySQLBackup object created by the job is deleted"
|
||||
enabled:
|
||||
type: boolean
|
||||
default: true
|
||||
description: "Whether the schedule is enabled or not"
|
||||
status:
|
||||
type: object
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: Status
|
||||
type: string
|
||||
description: Status of the InnoDB Cluster
|
||||
jsonPath: .status.cluster.status
|
||||
- name: Online
|
||||
type: integer
|
||||
description: Number of ONLINE InnoDB Cluster instances
|
||||
jsonPath: .status.cluster.onlineInstances
|
||||
- name: Instances
|
||||
type: integer
|
||||
description: Number of InnoDB Cluster instances configured
|
||||
jsonPath: .spec.instances
|
||||
- name: Routers
|
||||
type: integer
|
||||
description: Number of Router instances configured for the InnoDB Cluster
|
||||
jsonPath: .spec.router.instances
|
||||
- name: Age
|
||||
type: date
|
||||
jsonPath: .metadata.creationTimestamp
|
||||
scope: Namespaced
|
||||
names:
|
||||
kind: InnoDBCluster
|
||||
listKind: InnoDBClusterList
|
||||
singular: innodbcluster
|
||||
plural: innodbclusters
|
||||
shortNames:
|
||||
- ic
|
||||
- ics
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: mysqlbackups.mysql.oracle.com
|
||||
spec:
|
||||
group: mysql.oracle.com
|
||||
scope: Namespaced
|
||||
names:
|
||||
kind: MySQLBackup
|
||||
listKind: MySQLBackupList
|
||||
singular: mysqlbackup
|
||||
plural: mysqlbackups
|
||||
shortNames:
|
||||
- mbk
|
||||
versions:
|
||||
- name: v2
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
spec:
|
||||
type: object
|
||||
required: ["clusterName"]
|
||||
properties:
|
||||
clusterName:
|
||||
type: string
|
||||
backupProfileName:
|
||||
type: string
|
||||
backupProfile:
|
||||
type: object
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
addTimestampToBackupDirectory:
|
||||
type: boolean
|
||||
default: true
|
||||
deleteBackupData:
|
||||
type: boolean
|
||||
default: false
|
||||
status:
|
||||
type: object
|
||||
properties:
|
||||
status:
|
||||
type: string
|
||||
startTime:
|
||||
type: string
|
||||
completionTime:
|
||||
type: string
|
||||
elapsedTime:
|
||||
type: string
|
||||
output:
|
||||
type: string
|
||||
method:
|
||||
type: string
|
||||
source:
|
||||
type: string
|
||||
bucket:
|
||||
type: string
|
||||
ociTenancy:
|
||||
type: string
|
||||
spaceAvailable:
|
||||
type: string
|
||||
size:
|
||||
type: string
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: Cluster
|
||||
type: string
|
||||
description: Name of the target cluster
|
||||
jsonPath: .spec.clusterName
|
||||
- name: Status
|
||||
type: string
|
||||
description: Status of the Backup
|
||||
jsonPath: .status.status
|
||||
- name: Output
|
||||
type: string
|
||||
description: Name of the produced file/directory
|
||||
jsonPath: .status.output
|
||||
- name: Age
|
||||
type: date
|
||||
jsonPath: .metadata.creationTimestamp
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: clusterkopfpeerings.zalando.org
|
||||
spec:
|
||||
scope: Cluster
|
||||
group: zalando.org
|
||||
names:
|
||||
kind: ClusterKopfPeering
|
||||
plural: clusterkopfpeerings
|
||||
singular: clusterkopfpeering
|
||||
versions:
|
||||
- name: v1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
status:
|
||||
type: object
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: kopfpeerings.zalando.org
|
||||
spec:
|
||||
scope: Namespaced
|
||||
group: zalando.org
|
||||
names:
|
||||
kind: KopfPeering
|
||||
plural: kopfpeerings
|
||||
singular: kopfpeering
|
||||
versions:
|
||||
- name: v1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
status:
|
||||
type: object
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
|
||||
---
|
||||
# Source: mysql-operator/templates/service_account_operator.yaml
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: mysql-operator-sa
|
||||
namespace: mysql-operator
|
||||
---
|
||||
# Source: mysql-operator/templates/cluster_role_operator.yaml
|
||||
# The main role for the operator
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: mysql-operator
|
||||
rules:
|
||||
- apiGroups: [""]
|
||||
resources: ["pods"]
|
||||
verbs: ["get", "list", "watch", "patch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods/status"]
|
||||
verbs: ["get", "patch", "update", "watch"]
|
||||
# Kopf needs patch on secrets or the sidecar will throw
|
||||
# The operator needs this verb to be able to pass it to the sidecar
|
||||
- apiGroups: [""]
|
||||
resources: ["secrets"]
|
||||
verbs: ["get", "create", "list", "watch", "patch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["configmaps"]
|
||||
verbs: ["get", "create", "list", "watch", "patch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["services"]
|
||||
verbs: ["get", "create"]
|
||||
- apiGroups: [""]
|
||||
resources: ["serviceaccounts"]
|
||||
verbs: ["get", "create"]
|
||||
- apiGroups: [""]
|
||||
resources: ["events"]
|
||||
verbs: ["create", "patch", "update"]
|
||||
- apiGroups: ["rbac.authorization.k8s.io"]
|
||||
resources: ["rolebindings"]
|
||||
verbs: ["get", "create"]
|
||||
- apiGroups: ["policy"]
|
||||
resources: ["poddisruptionbudgets"]
|
||||
verbs: ["get", "create"]
|
||||
- apiGroups: ["batch"]
|
||||
resources: ["jobs"]
|
||||
verbs: ["create"]
|
||||
- apiGroups: ["batch"]
|
||||
resources: ["cronjobs"]
|
||||
verbs: ["create", "update", "delete"]
|
||||
- apiGroups: ["apps"]
|
||||
resources: ["deployments", "statefulsets"]
|
||||
verbs: ["get", "create", "patch", "watch", "delete"]
|
||||
- apiGroups: ["mysql.oracle.com"]
|
||||
resources: ["*"]
|
||||
verbs: ["*"]
|
||||
- apiGroups: ["zalando.org"]
|
||||
resources: ["*"]
|
||||
verbs: ["get", "patch", "list", "watch"]
|
||||
# Kopf: runtime observation of namespaces & CRDs (addition/deletion).
|
||||
- apiGroups: [apiextensions.k8s.io]
|
||||
resources: [customresourcedefinitions]
|
||||
verbs: [list, watch]
|
||||
- apiGroups: [""]
|
||||
resources: [namespaces]
|
||||
verbs: [list, watch]
|
||||
---
|
||||
# Source: mysql-operator/templates/cluster_role_sidecar.yaml
|
||||
# role for the server sidecar
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: mysql-sidecar
|
||||
rules:
|
||||
- apiGroups: [""]
|
||||
resources: ["pods"]
|
||||
verbs: ["get", "list", "watch", "patch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods/status"]
|
||||
verbs: ["get", "patch", "update", "watch"]
|
||||
# Kopf needs patch on secrets or the sidecar will throw
|
||||
- apiGroups: [""]
|
||||
resources: ["secrets"]
|
||||
verbs: ["get", "create", "list", "watch", "patch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["configmaps"]
|
||||
verbs: ["get", "create", "list", "watch", "patch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["services"]
|
||||
verbs: ["get", "create"]
|
||||
- apiGroups: [""]
|
||||
resources: ["serviceaccounts"]
|
||||
verbs: ["get", "create"]
|
||||
- apiGroups: [""]
|
||||
resources: ["events"]
|
||||
verbs: ["create", "patch", "update"]
|
||||
- apiGroups: ["apps"]
|
||||
resources: ["deployments"]
|
||||
verbs: ["get", "patch"]
|
||||
- apiGroups: ["mysql.oracle.com"]
|
||||
resources: ["innodbclusters"]
|
||||
verbs: ["get", "watch", "list"]
|
||||
- apiGroups: ["mysql.oracle.com"]
|
||||
resources: ["mysqlbackups"]
|
||||
verbs: ["create", "get", "list", "patch", "update", "watch", "delete"]
|
||||
- apiGroups: ["mysql.oracle.com"]
|
||||
resources: ["mysqlbackups/status"]
|
||||
verbs: ["get", "patch", "update", "watch"]
|
||||
---
|
||||
# Source: mysql-operator/templates/cluster_role_binding_operator.yaml
|
||||
# Give access to the operator
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: mysql-operator-rolebinding
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: mysql-operator-sa
|
||||
namespace: mysql-operator
|
||||
# TODO The following entry is for dev purposes only and must be deleted
|
||||
#- kind: Group
|
||||
# name: system:serviceaccounts
|
||||
# apiGroup: rbac.authorization.k8s.io
|
||||
roleRef:
|
||||
kind: ClusterRole
|
||||
name: mysql-operator
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
---
|
||||
# Source: mysql-operator/templates/service.yaml
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: mysql-operator
|
||||
namespace: mysql-operator
|
||||
labels:
|
||||
name: mysql-operator
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- port: 9443
|
||||
protocol: TCP
|
||||
selector:
|
||||
name: mysql-operator
|
||||
---
|
||||
# Source: mysql-operator/templates/deployment.yaml
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: mysql-operator
|
||||
namespace: mysql-operator
|
||||
labels:
|
||||
version: "8.0.30-2.0.6"
|
||||
app.kubernetes.io/name: mysql-operator
|
||||
app.kubernetes.io/instance: mysql-operator
|
||||
app.kubernetes.io/version: "8.0.30-2.0.6"
|
||||
app.kubernetes.io/component: controller
|
||||
app.kubernetes.io/managed-by: helm
|
||||
app.kubernetes.io/created-by: helm
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
name: mysql-operator
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
name: mysql-operator
|
||||
spec:
|
||||
containers:
|
||||
- name: mysql-operator
|
||||
image: mysql/mysql-operator:8.0.30-2.0.6
|
||||
imagePullPolicy: IfNotPresent
|
||||
args: ["mysqlsh", "--log-level=@INFO", "--pym", "mysqloperator", "operator"]
|
||||
env:
|
||||
- name: MYSQLSH_USER_CONFIG_HOME
|
||||
value: /mysqlsh
|
||||
|
||||
|
||||
- name: MYSQL_OPERATOR_IMAGE_PULL_POLICY
|
||||
value: IfNotPresent
|
||||
|
||||
volumeMounts:
|
||||
- name: mysqlsh-home
|
||||
mountPath: /mysqlsh
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
volumes:
|
||||
- name: mysqlsh-home
|
||||
emptyDir: {}
|
||||
serviceAccountName: mysql-operator-sa
|
||||
---
|
||||
# Source: mysql-operator/templates/cluster_kopf_keepering.yaml
|
||||
apiVersion: zalando.org/v1
|
||||
kind: ClusterKopfPeering
|
||||
metadata:
|
||||
name: mysql-operator
|
||||
@ -1 +0,0 @@
|
||||
../shared/networkpolicy-base.yml
|
||||
Loading…
Reference in New Issue
Block a user