1ba8089cd5
Always include mounts defined for the db-sync job under the pods section rather than requiring every chart to pass it in explicitly. Now the passed in value can be just for overrides. Since charts today already pass this in, we need to de-duplicate it to ensure we don't create this multiple times. Change-Id: I042e79cee7859ebdc001a056edc75eb89dd3e5b3
141 lines
6.2 KiB
Smarty
141 lines
6.2 KiB
Smarty
{{/*
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/}}
|
|
|
|
# This function creates a manifest for db migration and management.
|
|
# It can be used in charts dict created similar to the following:
|
|
# {- $dbSyncJob := dict "envAll" . "serviceName" "senlin" -}
|
|
# { $dbSyncJob | include "helm-toolkit.manifests.job_db_sync" }
|
|
|
|
{{- define "helm-toolkit.manifests.job_db_sync" -}}
|
|
{{- $envAll := index . "envAll" -}}
|
|
{{- $serviceName := index . "serviceName" -}}
|
|
{{- $jobNameRef := printf "%s_%s" $serviceName "db_sync" -}}
|
|
{{- $jobAnnotations := index . "jobAnnotations" -}}
|
|
{{- $jobLabels := index . "jobLabels" -}}
|
|
{{- $nodeSelector := index . "nodeSelector" | default ( dict $envAll.Values.labels.job.node_selector_key $envAll.Values.labels.job.node_selector_value ) -}}
|
|
{{- $tolerationsEnabled := index . "tolerationsEnabled" | default false -}}
|
|
{{- $configMapBin := index . "configMapBin" | default (printf "%s-%s" $serviceName "bin" ) -}}
|
|
{{- $configMapEtc := index . "configMapEtc" | default (printf "%s-%s" $serviceName "etc" ) -}}
|
|
{{- $podMount := index (index $envAll.Values.pod.mounts $jobNameRef | default dict) $jobNameRef | default dict -}}
|
|
{{- $podVolMounts := (concat ((index $podMount "volumeMounts" | default list)) ((index . "podVolMounts") | default (list))) | uniq -}}
|
|
{{- $podVols := (concat ((index $podMount "volumes" | default list)) ((index . "podVols") | default (list))) | uniq -}}
|
|
{{- $podEnvVars := index . "podEnvVars" | default false -}}
|
|
{{- $dbToSync := index . "dbToSync" | default ( dict "configFile" (printf "/etc/%s/%s.conf" $serviceName $serviceName ) "logConfigFile" (printf "/etc/%s/logging.conf" $serviceName ) "image" ( index $envAll.Values.images.tags ( printf "%s_db_sync" $serviceName )) ) -}}
|
|
{{- $secretBin := index . "secretBin" -}}
|
|
{{- $backoffLimit := index . "backoffLimit" | default "1000" -}}
|
|
{{- $activeDeadlineSeconds := index . "activeDeadlineSeconds" -}}
|
|
{{- $serviceNamePretty := $serviceName | replace "_" "-" -}}
|
|
{{- $dbAdminTlsSecret := index . "dbAdminTlsSecret" | default "" -}}
|
|
|
|
{{- $serviceAccountName := printf "%s-%s" $serviceNamePretty "db-sync" }}
|
|
{{ tuple $envAll "db_sync" $serviceAccountName | include "helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount" }}
|
|
---
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: {{ printf "%s-%s" $serviceNamePretty "db-sync" | quote }}
|
|
labels:
|
|
{{ tuple $envAll $serviceName "db-sync" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 4 }}
|
|
{{- if $jobLabels }}
|
|
{{ toYaml $jobLabels | indent 4 }}
|
|
{{- end }}
|
|
annotations:
|
|
{{ tuple $serviceAccountName $envAll | include "helm-toolkit.snippets.custom_job_annotations" | indent 4 -}}
|
|
{{- if $jobAnnotations }}
|
|
{{ toYaml $jobAnnotations | indent 4 }}
|
|
{{- end }}
|
|
spec:
|
|
backoffLimit: {{ $backoffLimit }}
|
|
{{- if $activeDeadlineSeconds }}
|
|
activeDeadlineSeconds: {{ $activeDeadlineSeconds }}
|
|
{{- end }}
|
|
template:
|
|
metadata:
|
|
labels:
|
|
{{ tuple $envAll $serviceName "db-sync" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
|
|
{{- if $jobLabels }}
|
|
{{ toYaml $jobLabels | indent 8 }}
|
|
{{- end }}
|
|
annotations:
|
|
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
|
|
spec:
|
|
serviceAccountName: {{ $serviceAccountName }}
|
|
restartPolicy: OnFailure
|
|
{{ tuple $envAll "db_sync" | include "helm-toolkit.snippets.kubernetes_image_pull_secrets" | indent 6 }}
|
|
nodeSelector:
|
|
{{ toYaml $nodeSelector | indent 8 }}
|
|
{{- if $tolerationsEnabled }}
|
|
{{ tuple $envAll $serviceName | include "helm-toolkit.snippets.kubernetes_tolerations" | indent 6 }}
|
|
{{- end}}
|
|
initContainers:
|
|
{{ tuple $envAll "db_sync" list | include "helm-toolkit.snippets.kubernetes_entrypoint_init_container" | indent 8 }}
|
|
containers:
|
|
- name: {{ printf "%s-%s" $serviceNamePretty "db-sync" | quote }}
|
|
image: {{ $dbToSync.image | quote }}
|
|
imagePullPolicy: {{ $envAll.Values.images.pull_policy | quote }}
|
|
{{ tuple $envAll $envAll.Values.pod.resources.jobs.db_sync | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
|
{{- if $podEnvVars }}
|
|
env:
|
|
{{ $podEnvVars | toYaml | indent 12 }}
|
|
{{- end }}
|
|
command:
|
|
- /bin/bash
|
|
- -c
|
|
- /tmp/db-sync.sh
|
|
volumeMounts:
|
|
- name: pod-tmp
|
|
mountPath: /tmp
|
|
- name: db-sync-sh
|
|
mountPath: /tmp/db-sync.sh
|
|
subPath: db-sync.sh
|
|
readOnly: true
|
|
- name: etc-service
|
|
mountPath: {{ dir $dbToSync.configFile | quote }}
|
|
- name: db-sync-conf
|
|
mountPath: {{ $dbToSync.configFile | quote }}
|
|
subPath: {{ base $dbToSync.configFile | quote }}
|
|
readOnly: true
|
|
- name: db-sync-conf
|
|
mountPath: {{ $dbToSync.logConfigFile | quote }}
|
|
subPath: {{ base $dbToSync.logConfigFile | quote }}
|
|
readOnly: true
|
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $dbAdminTlsSecret "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
|
{{- if $podVolMounts }}
|
|
{{ $podVolMounts | toYaml | indent 12 }}
|
|
{{- end }}
|
|
volumes:
|
|
- name: pod-tmp
|
|
emptyDir: {}
|
|
- name: db-sync-sh
|
|
{{- if $secretBin }}
|
|
secret:
|
|
secretName: {{ $secretBin | quote }}
|
|
defaultMode: 0555
|
|
{{- else }}
|
|
configMap:
|
|
name: {{ $configMapBin | quote }}
|
|
defaultMode: 0555
|
|
{{- end }}
|
|
- name: etc-service
|
|
emptyDir: {}
|
|
- name: db-sync-conf
|
|
secret:
|
|
secretName: {{ $configMapEtc | quote }}
|
|
defaultMode: 0444
|
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $dbAdminTlsSecret | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
|
{{- if $podVols }}
|
|
{{ $podVols | toYaml | indent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|