리소스 변경
This commit is contained in:
@@ -6,7 +6,7 @@ metadata:
|
|||||||
name: metric-analyzer-worker
|
name: metric-analyzer-worker
|
||||||
namespace: imxc
|
namespace: imxc
|
||||||
spec:
|
spec:
|
||||||
replicas: 10
|
replicas: 3
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: metric-analyzer-worker
|
app: metric-analyzer-worker
|
||||||
|
|||||||
@@ -355,7 +355,7 @@ alertmanager:
|
|||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
|
||||||
distributor:
|
distributor:
|
||||||
replicas: 2
|
replicas: 1
|
||||||
|
|
||||||
service:
|
service:
|
||||||
annotations: {}
|
annotations: {}
|
||||||
@@ -458,7 +458,7 @@ distributor:
|
|||||||
lifecycle: {}
|
lifecycle: {}
|
||||||
|
|
||||||
ingester:
|
ingester:
|
||||||
replicas: 3
|
replicas: 1
|
||||||
|
|
||||||
statefulSet:
|
statefulSet:
|
||||||
# -- If true, use a statefulset instead of a deployment for pod management.
|
# -- If true, use a statefulset instead of a deployment for pod management.
|
||||||
@@ -737,7 +737,7 @@ ruler:
|
|||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
|
||||||
querier:
|
querier:
|
||||||
replicas: 2
|
replicas: 1
|
||||||
|
|
||||||
service:
|
service:
|
||||||
annotations: {}
|
annotations: {}
|
||||||
@@ -839,7 +839,7 @@ querier:
|
|||||||
lifecycle: {}
|
lifecycle: {}
|
||||||
|
|
||||||
query_frontend:
|
query_frontend:
|
||||||
replicas: 2
|
replicas: 1
|
||||||
|
|
||||||
service:
|
service:
|
||||||
annotations: {}
|
annotations: {}
|
||||||
@@ -1087,7 +1087,7 @@ configs:
|
|||||||
|
|
||||||
nginx:
|
nginx:
|
||||||
enabled: true
|
enabled: true
|
||||||
replicas: 2
|
replicas: 1
|
||||||
http_listen_port: 80
|
http_listen_port: 80
|
||||||
config:
|
config:
|
||||||
dnsResolver: coredns.kube-system.svc.cluster.local
|
dnsResolver: coredns.kube-system.svc.cluster.local
|
||||||
|
|||||||
@@ -5,7 +5,7 @@ fullnameOverride: "imxc-keycloak"
|
|||||||
nameOverride: ""
|
nameOverride: ""
|
||||||
|
|
||||||
# The number of replicas to create (has no effect if autoscaling enabled)
|
# The number of replicas to create (has no effect if autoscaling enabled)
|
||||||
replicas: 2
|
replicas: 1
|
||||||
|
|
||||||
image:
|
image:
|
||||||
# The Keycloak image repository
|
# The Keycloak image repository
|
||||||
|
|||||||
@@ -2,22 +2,22 @@ apiVersion: apps/v1
|
|||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
app: cmoa-pod-exporter
|
app: cmoa-kube-exporter
|
||||||
name: cmoa-pod-exporter
|
name: cmoa-kube-exporter
|
||||||
namespace: imxc
|
namespace: imxc
|
||||||
spec:
|
spec:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: cmoa-pod-exporter
|
app: cmoa-kube-exporter
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
app: cmoa-pod-exporter
|
app: cmoa-kube-exporter
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- image: {{ .Values.global.IMXC_IN_REGISTRY }}/cmoa-kube-exporter:{{ .Values.global.KUBE_EXPORTER_VERSION }}
|
- image: {{ .Values.global.IMXC_IN_REGISTRY }}/cmoa-kube-exporter:{{ .Values.global.KUBE_EXPORTER_VERSION }}
|
||||||
name: cmoa-pod-exporter
|
name: cmoa-kube-exporter
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 8080
|
- containerPort: 8080
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
|
|||||||
@@ -39,6 +39,6 @@ spec:
|
|||||||
value: {{ .Values.global.BLACK_LIST_FALT }}
|
value: {{ .Values.global.BLACK_LIST_FALT }}
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
memory: 1Gi
|
memory: 2Gi
|
||||||
requests:
|
requests:
|
||||||
memory: 200Mi
|
memory: 500Mi
|
||||||
|
|||||||
4
roles/cmoa_password/defaults/main.yml
Normal file
4
roles/cmoa_password/defaults/main.yml
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
---
|
||||||
|
cmoa_namespace: imxc
|
||||||
|
pg_version:
|
||||||
|
- 3.5.5
|
||||||
7
roles/cmoa_password/files/password.sh
Executable file
7
roles/cmoa_password/files/password.sh
Executable file
@@ -0,0 +1,7 @@
|
|||||||
|
KEYCLOAK_HOST=http://10.10.43.210:31082
|
||||||
|
ADMIN_USER_OLD_PASSWORD="cmoaA13!#"
|
||||||
|
ADMIN_USER_NEW_PASSWORD=admin
|
||||||
|
|
||||||
|
TOKEN=$(curl -s -X POST -H 'Content-Type: application/x-www-form-urlencoded' -d "username=admin&password=$ADMIN_USER_OLD_PASSWORD&client_id=admin-cli&grant_type=password" "$KEYCLOAK_HOST/auth/realms/master/exem/openid-connect/token" | jq -r ".access_token" ;)
|
||||||
|
|
||||||
|
curl -s -X PUT -H "Authorization: Bearer $TOKEN" -H "Content-type: application/json;charset=UTF-8" -H 'Accept: application/json' "$KEYCLOAK_HOST/auth/admin/realms/exem/users/admin/reset-password" -d "{\"type\":\"password\",\"value\":\"$ADMIN_USER_NEW_PASSWORD\",\"temporary\":false}"
|
||||||
37
roles/cmoa_password/tasks/main.yml
Normal file
37
roles/cmoa_password/tasks/main.yml
Normal file
@@ -0,0 +1,37 @@
|
|||||||
|
---
|
||||||
|
- name: 1. Get a list of all pods from the namespace
|
||||||
|
shell: kubectl -n "{{ cmoa_namespace }}" get pods --no-headers -o custom-columns=":metadata.name" |grep postgres
|
||||||
|
register: pod_list
|
||||||
|
when: kubernetes_role == 'master'
|
||||||
|
|
||||||
|
- debug:
|
||||||
|
msg: "{{ pod_list.stdout_lines }}"
|
||||||
|
when: kubernetes_role == 'master'
|
||||||
|
|
||||||
|
- name: 2. Copy psql file in postgres
|
||||||
|
kubernetes.core.k8s_cp:
|
||||||
|
namespace: "{{ cmoa_namespace }}"
|
||||||
|
pod: "{{ pod_list.stdout }}"
|
||||||
|
remote_path: /tmp/postgres_patch_{{ item }}.psql
|
||||||
|
local_path: "{{ role_path }}/files/pg-patch/postgres_patch_{{ item }}.psql"
|
||||||
|
with_items: "{{ pg_version }}"
|
||||||
|
when: kubernetes_role == 'master'
|
||||||
|
|
||||||
|
- name: 3. Execute a command in postgres
|
||||||
|
kubernetes.core.k8s_exec:
|
||||||
|
namespace: "{{ cmoa_namespace }}"
|
||||||
|
pod: "{{ pod_list.stdout }}"
|
||||||
|
command: bash -c "PGPASSWORD='eorbahrhkswp' && /usr/bin/psql -h 'localhost' -U 'admin' -d 'postgresdb' -f /tmp/postgres_patch_{{ item }}.psql"
|
||||||
|
register: execute_register
|
||||||
|
with_items: "{{ pg_version }}"
|
||||||
|
when: kubernetes_role == 'master'
|
||||||
|
|
||||||
|
- debug:
|
||||||
|
msg: |
|
||||||
|
______ _ _ _ _____ ___ ___ _____ ___
|
||||||
|
| ___ \| | | | | | / __ \| \/ || _ | / _ \
|
||||||
|
| |_/ /| | ___ __ _ ___ ___ _ __ ___ ___ | |_ __ _ _ __ | |_ | / \/| . . || | | |/ /_\ \
|
||||||
|
| __/ | | / _ \ / _` |/ __| / _ \ | '__| / _ \/ __|| __| / _` || '__|| __| | | | |\/| || | | || _ |
|
||||||
|
| | | || __/| (_| |\__ \| __/ | | | __/\__ \| |_ | (_| || | | |_ | \__/\| | | |\ \_/ /| | | |
|
||||||
|
\_| |_| \___| \__,_||___/ \___| |_| \___||___/ \__| \__,_||_| \__| \____/\_| |_/ \___/ \_| |_/
|
||||||
|
when: kubernetes_role == 'master'
|
||||||
Reference in New Issue
Block a user