forked from k-space/kube
		
	
		
			
				
	
	
		
			111 lines
		
	
	
		
			2.8 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			111 lines
		
	
	
		
			2.8 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
| ---
 | |
| apiVersion: mongodbcommunity.mongodb.com/v1
 | |
| kind: MongoDBCommunity
 | |
| metadata:
 | |
|   name: mongodb
 | |
| spec:
 | |
|   agent:
 | |
|     logLevel: ERROR
 | |
|     maxLogFileDurationHours: 1
 | |
|   additionalMongodConfig:
 | |
|     systemLog:
 | |
|       quiet: true
 | |
|   members: 2
 | |
|   arbiters: 1
 | |
|   type: ReplicaSet
 | |
|   version: "6.0.3"
 | |
|   security:
 | |
|     authentication:
 | |
|       modes: ["SCRAM"]
 | |
|   users:
 | |
|     - name: readwrite
 | |
|       db: application
 | |
|       passwordSecretRef:
 | |
|         name: mongodb-application-readwrite-password
 | |
|       roles:
 | |
|         - name: readWrite
 | |
|           db: application
 | |
|       scramCredentialsSecretName: mongodb-application-readwrite
 | |
|     - name: readonly
 | |
|       db: application
 | |
|       passwordSecretRef:
 | |
|         name: mongodb-application-readonly-password
 | |
|       roles:
 | |
|         - name: read
 | |
|           db: application
 | |
|       scramCredentialsSecretName: mongodb-application-readonly
 | |
|   statefulSet:
 | |
|     spec:
 | |
|       logLevel: WARN
 | |
|       template:
 | |
|         spec:
 | |
|           containers:
 | |
|             - name: mongod
 | |
|               resources:
 | |
|                 requests:
 | |
|                   cpu: 100m
 | |
|                   memory: 512Mi
 | |
|                 limits:
 | |
|                   cpu: 500m
 | |
|                   memory: 1Gi
 | |
|               volumeMounts:
 | |
|                 - name: journal-volume
 | |
|                   mountPath: /data/journal
 | |
|             - name: mongodb-agent
 | |
|               resources:
 | |
|                 requests:
 | |
|                   cpu: 1m
 | |
|                   memory: 100Mi
 | |
|                 limits: {}
 | |
|           affinity:
 | |
|             podAntiAffinity:
 | |
|               requiredDuringSchedulingIgnoredDuringExecution:
 | |
|                 - labelSelector:
 | |
|                     matchExpressions:
 | |
|                       - key: app
 | |
|                         operator: In
 | |
|                         values:
 | |
|                           - mongodb-svc
 | |
|                   topologyKey: topology.kubernetes.io/zone
 | |
|           nodeSelector:
 | |
|             dedicated: storage
 | |
|           tolerations:
 | |
|             - key: dedicated
 | |
|               operator: Equal
 | |
|               value: storage
 | |
|               effect: NoSchedule
 | |
|       volumeClaimTemplates:
 | |
|         - metadata:
 | |
|             name: logs-volume
 | |
|             labels:
 | |
|               usecase: logs
 | |
|           spec:
 | |
|             storageClassName: mongo
 | |
|             accessModes:
 | |
|               - ReadWriteOnce
 | |
|             resources:
 | |
|               requests:
 | |
|                 storage: 100Mi
 | |
|         - metadata:
 | |
|             name: journal-volume
 | |
|             labels:
 | |
|               usecase: journal
 | |
|           spec:
 | |
|             storageClassName: mongo
 | |
|             accessModes:
 | |
|             - ReadWriteOnce
 | |
|             resources:
 | |
|               requests:
 | |
|                 storage: 1Gi
 | |
|         - metadata:
 | |
|             name: data-volume
 | |
|             labels:
 | |
|               usecase: data
 | |
|           spec:
 | |
|             storageClassName: mongo
 | |
|             accessModes:
 | |
|             - ReadWriteOnce
 | |
|             resources:
 | |
|               requests:
 | |
|                 storage: 2Gi
 |