213 lines
9.2 KiB
YAML
213 lines
9.2 KiB
YAML
{{/*
|
|
Licensed to the Apache Software Foundation (ASF) under one
|
|
or more contributor license agreements. See the NOTICE file
|
|
distributed with this work for additional information
|
|
regarding copyright ownership. The ASF licenses this file
|
|
to you under the Apache License, Version 2.0 (the
|
|
"License"); you may not use this file except in compliance
|
|
with the License. You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing,
|
|
software distributed under the License is distributed on an
|
|
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
KIND, either express or implied. See the License for the
|
|
specific language governing permissions and limitations
|
|
under the License.
|
|
*/}}
|
|
|
|
################################
|
|
## Airflow Pgbouncer Deployment
|
|
#################################
|
|
{{- if .Values.pgbouncer.enabled }}
|
|
{{- $nodeSelector := or .Values.pgbouncer.nodeSelector .Values.nodeSelector }}
|
|
{{- $affinity := or .Values.pgbouncer.affinity .Values.affinity }}
|
|
{{- $tolerations := or .Values.pgbouncer.tolerations .Values.tolerations }}
|
|
{{- $topologySpreadConstraints := or .Values.pgbouncer.topologySpreadConstraints .Values.topologySpreadConstraints }}
|
|
{{- $revisionHistoryLimit := or .Values.pgbouncer.revisionHistoryLimit .Values.revisionHistoryLimit }}
|
|
{{- $securityContext := include "localPodSecurityContext" .Values.pgbouncer }}
|
|
{{- $containerSecurityContext := include "externalContainerSecurityContext" .Values.pgbouncer }}
|
|
{{- $containerSecurityContextMetricsExporter := include "externalContainerSecurityContext" .Values.pgbouncer.metricsExporterSidecar }}
|
|
{{- $containerLifecycleHooks := .Values.pgbouncer.containerLifecycleHooks }}
|
|
{{- $containerLifecycleHooksMetricsExporter := .Values.pgbouncer.metricsExporterSidecar.containerLifecycleHooks }}
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "airflow.fullname" . }}-pgbouncer
|
|
labels:
|
|
tier: airflow
|
|
component: pgbouncer
|
|
release: {{ .Release.Name }}
|
|
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
heritage: {{ .Release.Service }}
|
|
{{- with .Values.labels }}
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- if .Values.pgbouncer.annotations }}
|
|
annotations: {{- toYaml .Values.pgbouncer.annotations | nindent 4 }}
|
|
{{- end }}
|
|
spec:
|
|
replicas: {{ .Values.pgbouncer.replicas | default "1" }}
|
|
{{- if $revisionHistoryLimit }}
|
|
revisionHistoryLimit: {{ $revisionHistoryLimit }}
|
|
{{- end }}
|
|
strategy:
|
|
rollingUpdate:
|
|
maxSurge: 1
|
|
maxUnavailable: 0
|
|
selector:
|
|
matchLabels:
|
|
tier: airflow
|
|
component: pgbouncer
|
|
release: {{ .Release.Name }}
|
|
template:
|
|
metadata:
|
|
labels:
|
|
tier: airflow
|
|
component: pgbouncer
|
|
release: {{ .Release.Name }}
|
|
{{- with .Values.labels }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
annotations:
|
|
checksum/pgbouncer-config-secret: {{ include (print $.Template.BasePath "/secrets/pgbouncer-config-secret.yaml") . | sha256sum }}
|
|
checksum/pgbouncer-certificates-secret: {{ include (print $.Template.BasePath "/secrets/pgbouncer-certificates-secret.yaml") . | sha256sum }}
|
|
{{- if .Values.pgbouncer.podAnnotations }}
|
|
{{- toYaml .Values.pgbouncer.podAnnotations | nindent 8 }}
|
|
{{- end }}
|
|
spec:
|
|
{{- if .Values.pgbouncer.priorityClassName }}
|
|
priorityClassName: {{ .Values.pgbouncer.priorityClassName }}
|
|
{{- end }}
|
|
nodeSelector: {{- toYaml $nodeSelector | nindent 8 }}
|
|
affinity: {{- toYaml $affinity | nindent 8 }}
|
|
{{- if .Values.schedulerName }}
|
|
schedulerName: {{ .Values.schedulerName }}
|
|
{{- end }}
|
|
tolerations: {{- toYaml $tolerations | nindent 8 }}
|
|
topologySpreadConstraints: {{- toYaml $topologySpreadConstraints | nindent 8 }}
|
|
serviceAccountName: {{ include "pgbouncer.serviceAccountName" . }}
|
|
securityContext: {{ $securityContext | nindent 8 }}
|
|
restartPolicy: Always
|
|
{{- if or .Values.registry.secretName .Values.registry.connection }}
|
|
imagePullSecrets:
|
|
- name: {{ template "registry_secret" . }}
|
|
{{- end }}
|
|
containers:
|
|
- name: pgbouncer
|
|
image: {{ template "pgbouncer_image" . }}
|
|
imagePullPolicy: {{ .Values.images.pgbouncer.pullPolicy }}
|
|
securityContext: {{ $containerSecurityContext | nindent 12 }}
|
|
{{- if .Values.pgbouncer.command }}
|
|
command: {{ tpl (toYaml .Values.pgbouncer.command) . | nindent 12 }}
|
|
{{- end }}
|
|
{{- if .Values.pgbouncer.args }}
|
|
args: {{ tpl (toYaml .Values.pgbouncer.args) . | nindent 12 }}
|
|
{{- end }}
|
|
resources: {{- toYaml .Values.pgbouncer.resources | nindent 12 }}
|
|
{{- with .Values.pgbouncer.env }}
|
|
env: {{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
ports:
|
|
- name: pgbouncer
|
|
containerPort: {{ .Values.ports.pgbouncer }}
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: {{ .Values.ports.pgbouncer }}
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: {{ .Values.ports.pgbouncer }}
|
|
volumeMounts:
|
|
- name: pgbouncer-config
|
|
subPath: pgbouncer.ini
|
|
mountPath: /etc/pgbouncer/pgbouncer.ini
|
|
readOnly: true
|
|
- name: pgbouncer-config
|
|
subPath: users.txt
|
|
mountPath: /etc/pgbouncer/users.txt
|
|
readOnly: true
|
|
{{- if .Values.pgbouncer.ssl.ca }}
|
|
- name: pgbouncer-certificates
|
|
subPath: root.crt
|
|
mountPath: /etc/pgbouncer/root.crt
|
|
readOnly: true
|
|
{{- end }}
|
|
{{- if .Values.pgbouncer.ssl.cert }}
|
|
- name: pgbouncer-certificates
|
|
subPath: server.crt
|
|
mountPath: /etc/pgbouncer/server.crt
|
|
readOnly: true
|
|
{{- end }}
|
|
{{- if .Values.pgbouncer.ssl.key }}
|
|
- name: pgbouncer-certificates
|
|
subPath: server.key
|
|
mountPath: /etc/pgbouncer/server.key
|
|
readOnly: true
|
|
{{- end }}
|
|
{{- if .Values.volumeMounts }}
|
|
{{- toYaml .Values.volumeMounts | nindent 12 }}
|
|
{{- end }}
|
|
{{- if .Values.pgbouncer.extraVolumeMounts }}
|
|
{{- tpl (toYaml .Values.pgbouncer.extraVolumeMounts) . | nindent 12 }}
|
|
{{- end }}
|
|
{{- if $containerLifecycleHooks }}
|
|
lifecycle: {{- tpl (toYaml $containerLifecycleHooks) . | nindent 12 }}
|
|
{{- end }}
|
|
- name: metrics-exporter
|
|
resources: {{- toYaml .Values.pgbouncer.metricsExporterSidecar.resources | nindent 12 }}
|
|
image: {{ template "pgbouncer_exporter_image" . }}
|
|
imagePullPolicy: {{ .Values.images.pgbouncerExporter.pullPolicy }}
|
|
securityContext: {{ $containerSecurityContextMetricsExporter | nindent 12 }}
|
|
env:
|
|
- name: DATABASE_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ template "pgbouncer_stats_secret" . }}
|
|
{{- if (and .Values.pgbouncer.metricsExporterSidecar.statsSecretName .Values.pgbouncer.metricsExporterSidecar.statsSecretKey) }}
|
|
key: {{ .Values.pgbouncer.metricsExporterSidecar.statsSecretKey }}
|
|
{{- else }}
|
|
key: "connection"
|
|
{{- end }}
|
|
ports:
|
|
- name: metrics
|
|
containerPort: {{ .Values.ports.pgbouncerScrape }}
|
|
livenessProbe:
|
|
exec:
|
|
command:
|
|
- pgbouncer_exporter
|
|
- health
|
|
initialDelaySeconds: {{ .Values.pgbouncer.metricsExporterSidecar.livenessProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ .Values.pgbouncer.metricsExporterSidecar.livenessProbe.periodSeconds }}
|
|
timeoutSeconds: {{ .Values.pgbouncer.metricsExporterSidecar.livenessProbe.timeoutSeconds }}
|
|
readinessProbe:
|
|
exec:
|
|
command:
|
|
- pgbouncer_exporter
|
|
- health
|
|
initialDelaySeconds: {{ .Values.pgbouncer.metricsExporterSidecar.readinessProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ .Values.pgbouncer.metricsExporterSidecar.readinessProbe.periodSeconds }}
|
|
timeoutSeconds: {{ .Values.pgbouncer.metricsExporterSidecar.readinessProbe.timeoutSeconds }}
|
|
{{- if $containerLifecycleHooksMetricsExporter }}
|
|
lifecycle: {{- tpl (toYaml $containerLifecycleHooksMetricsExporter) . | nindent 12 }}
|
|
{{- end }}
|
|
{{- if .Values.pgbouncer.extraContainers }}
|
|
{{- toYaml .Values.pgbouncer.extraContainers | nindent 8 }}
|
|
{{- end }}
|
|
volumes:
|
|
- name: pgbouncer-config
|
|
secret:
|
|
secretName: {{ template "pgbouncer_config_secret" . }}
|
|
{{- if or .Values.pgbouncer.ssl.ca .Values.pgbouncer.ssl.cert .Values.pgbouncer.ssl.key }}
|
|
- name: pgbouncer-certificates
|
|
secret:
|
|
secretName: {{ template "pgbouncer_certificates_secret" . }}
|
|
{{- end }}
|
|
{{- if .Values.volumes }}
|
|
{{- toYaml .Values.volumes | nindent 8 }}
|
|
{{- end }}
|
|
{{- if .Values.pgbouncer.extraVolumes }}
|
|
{{- tpl (toYaml .Values.pgbouncer.extraVolumes) . | nindent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|