mirror of
https://github.com/outbackdingo/patroni.git
synced 2026-08-25 14:53:37 +00:00
Alexander KukushkinandGitHub
b470ade20e
This commit is a breaking change: 1. `role` in DCS is written as "primary" instead of "master". 2. `role` in REST API responses is also written as "primary". 3. REST API no longer accepts role=master in requests (for example switchover/failover/restart endpoints). 4. `/metrics` REST API endpoint will no longer report `patroni_master`. 5. `patronictl` no longer accepts `--master` argument. 6. `no_master` option in declarative configuration of custom replica creation methods is no longer treated as a special option, please use `no_leader` instead. 7. `patroni_wale_restore` doesn't accept `--no_master` anymore. 8. `patroni_barman` doesn't accept `--role=master` anymore. 9. callback scripts will be executed with role=primary instead of role=master 10. On Kubernetes Patroni by default will set role label to primary. In case if you want to keep old behavior and avoid downtime or lengthy complex migrations you can configure `kubernetes.leader_label_value` and `kubernetes.standby_leader_label_value` to `master`. However, a few exceptions regarding master are still in place: 1. `GET /master` REST API endpoint will continue to work. 2. `master_start_timeout` and `master_stop_timeout` in global configuration are still accepted. 3. `master` tag is still preserved in Consul services in addition to `primary`. Rationale for these exceptions: DBA doesn't always 100% control the infrastructure and can't adjust the configuration.
356 lines
10 KiB
YAML
356 lines
10 KiB
YAML
apiVersion: v1
|
|
kind: Template
|
|
metadata:
|
|
name: patroni-pgsql-persistent
|
|
annotations:
|
|
description: |-
|
|
Patroni Postgresql database cluster, with persistent storage.
|
|
iconClass: icon-postgresql
|
|
openshift.io/display-name: Patroni Postgresql (Persistent)
|
|
openshift.io/long-description: This template deploys a a patroni postgresql HA cluster with persistent storage.
|
|
tags: postgresql
|
|
objects:
|
|
- apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
name: ${PATRONI_CLUSTER_NAME}
|
|
spec:
|
|
ports:
|
|
- port: 5432
|
|
protocol: TCP
|
|
targetPort: 5432
|
|
sessionAffinity: None
|
|
type: ClusterIP
|
|
status:
|
|
loadBalancer: {}
|
|
- apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
name: ${PATRONI_PRIMARY_SERVICE_NAME}
|
|
spec:
|
|
ports:
|
|
- port: 5432
|
|
protocol: TCP
|
|
targetPort: 5432
|
|
selector:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
role: primary
|
|
sessionAffinity: None
|
|
type: ClusterIP
|
|
status:
|
|
loadBalancer: {}
|
|
- apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: ${PATRONI_CLUSTER_NAME}
|
|
labels:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
stringData:
|
|
superuser-password: ${PATRONI_SUPERUSER_PASSWORD}
|
|
replication-password: ${PATRONI_REPLICATION_PASSWORD}
|
|
- apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
name: ${PATRONI_REPLICA_SERVICE_NAME}
|
|
spec:
|
|
ports:
|
|
- port: 5432
|
|
protocol: TCP
|
|
targetPort: 5432
|
|
selector:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
role: replica
|
|
sessionAffinity: None
|
|
type: ClusterIP
|
|
status:
|
|
loadBalancer: {}
|
|
- apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
creationTimestamp: null
|
|
generation: 3
|
|
labels:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
name: ${APPLICATION_NAME}
|
|
spec:
|
|
podManagementPolicy: OrderedReady
|
|
replicas: 3
|
|
revisionHistoryLimit: 10
|
|
selector:
|
|
matchLabels:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
serviceName: ${APPLICATION_NAME}
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
spec:
|
|
initContainers:
|
|
- command:
|
|
- sh
|
|
- -c
|
|
- "mkdir -p /home/postgres/pgdata/pgroot/data && chmod 0700 /home/postgres/pgdata/pgroot/data"
|
|
image: docker-registry.default.svc:5000/${NAMESPACE}/patroni:latest
|
|
imagePullPolicy: IfNotPresent
|
|
name: fix-perms
|
|
resources: {}
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
volumeMounts:
|
|
- mountPath: /home/postgres/pgdata
|
|
name: ${APPLICATION_NAME}
|
|
containers:
|
|
- env:
|
|
- name: PATRONI_KUBERNETES_POD_IP
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: status.podIP
|
|
- name: PATRONI_KUBERNETES_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.namespace
|
|
- name: PATRONI_KUBERNETES_BYPASS_API_SERVICE
|
|
value: 'true'
|
|
- name: PATRONI_KUBERNETES_LABELS
|
|
value: '{application: ${APPLICATION_NAME}, cluster-name: ${PATRONI_CLUSTER_NAME}}'
|
|
- name: PATRONI_SUPERUSER_USERNAME
|
|
value: ${PATRONI_SUPERUSER_USERNAME}
|
|
- name: PATRONI_SUPERUSER_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: superuser-password
|
|
name: ${PATRONI_CLUSTER_NAME}
|
|
- name: PATRONI_REPLICATION_USERNAME
|
|
value: ${PATRONI_REPLICATION_USERNAME}
|
|
- name: PATRONI_REPLICATION_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: replication-password
|
|
name: ${PATRONI_CLUSTER_NAME}
|
|
- name: PATRONI_SCOPE
|
|
value: ${PATRONI_CLUSTER_NAME}
|
|
- name: PATRONI_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.name
|
|
- name: PATRONI_POSTGRESQL_DATA_DIR
|
|
value: /home/postgres/pgdata/pgroot/data
|
|
- name: PATRONI_POSTGRESQL_PGPASS
|
|
value: /tmp/pgpass
|
|
- name: PATRONI_POSTGRESQL_LISTEN
|
|
value: 0.0.0.0:5432
|
|
- name: PATRONI_RESTAPI_LISTEN
|
|
value: 0.0.0.0:8008
|
|
image: docker-registry.default.svc:5000/${NAMESPACE}/patroni:latest
|
|
imagePullPolicy: IfNotPresent
|
|
name: ${APPLICATION_NAME}
|
|
readinessProbe:
|
|
httpGet:
|
|
scheme: HTTP
|
|
path: /readiness
|
|
port: 8008
|
|
initialDelaySeconds: 3
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
successThreshold: 1
|
|
failureThreshold: 3
|
|
ports:
|
|
- containerPort: 8008
|
|
protocol: TCP
|
|
- containerPort: 5432
|
|
protocol: TCP
|
|
resources: {}
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
volumeMounts:
|
|
- mountPath: /home/postgres/pgdata
|
|
name: ${APPLICATION_NAME}
|
|
dnsPolicy: ClusterFirst
|
|
restartPolicy: Always
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: ${SERVICE_ACCOUNT}
|
|
serviceAccountName: ${SERVICE_ACCOUNT}
|
|
terminationGracePeriodSeconds: 0
|
|
volumes:
|
|
- name: ${APPLICATION_NAME}
|
|
persistentVolumeClaim:
|
|
claimName: ${APPLICATION_NAME}
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
labels:
|
|
application: ${APPLICATION_NAME}
|
|
name: ${APPLICATION_NAME}
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: ${PVC_SIZE}
|
|
updateStrategy:
|
|
type: OnDelete
|
|
- apiVersion: v1
|
|
kind: Endpoints
|
|
metadata:
|
|
name: ${APPLICATION_NAME}
|
|
labels:
|
|
application: ${APPLICATION_NAME}
|
|
cluster-name: ${PATRONI_CLUSTER_NAME}
|
|
subsets: []
|
|
- apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: ${SERVICE_ACCOUNT}
|
|
- apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: ${SERVICE_ACCOUNT}
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
# delete is required only for 'patronictl remove'
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- endpoints
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
# the following three privileges are necessary only when using endpoints
|
|
- create
|
|
- list
|
|
- watch
|
|
# delete is required only for for 'patronictl remove'
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: ${SERVICE_ACCOUNT}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: ${SERVICE_ACCOUNT}
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: ${SERVICE_ACCOUNT}
|
|
# Following privileges are only required if deployed not in the "default"
|
|
# namespace and you want Patroni to bypass kubernetes service
|
|
# (PATRONI_KUBERNETES_BYPASS_API_SERVICE=true)
|
|
- apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: patroni-k8s-ep-access
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- endpoints
|
|
resourceNames:
|
|
- kubernetes
|
|
verbs:
|
|
- get
|
|
- apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: ${NAMESPACE}-${SERVICE_ACCOUNT}-k8s-ep-access
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: patroni-k8s-ep-access
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: ${SERVICE_ACCOUNT}
|
|
namespace: ${NAMESPACE}
|
|
parameters:
|
|
- description: The name of the application for labelling all artifacts.
|
|
displayName: Application Name
|
|
name: APPLICATION_NAME
|
|
value: patroni-persistent
|
|
- description: The name of the patroni-pgsql cluster.
|
|
displayName: Cluster Name
|
|
name: PATRONI_CLUSTER_NAME
|
|
value: patroni-persistent
|
|
- description: The name of the OpenShift Service exposed for the patroni-persistent-primary container.
|
|
displayName: Primary service name.
|
|
name: PATRONI_PRIMARY_SERVICE_NAME
|
|
value: patroni-persistent-primary
|
|
- description: The name of the OpenShift Service exposed for the patroni-persistent-replica containers.
|
|
displayName: Replica service name.
|
|
name: PATRONI_REPLICA_SERVICE_NAME
|
|
value: patroni-persistent-replica
|
|
- description: Maximum amount of memory the container can use.
|
|
displayName: Memory Limit
|
|
name: MEMORY_LIMIT
|
|
value: 512Mi
|
|
- description: The OpenShift Namespace where the patroni and postgresql ImageStream resides.
|
|
displayName: ImageStream Namespace
|
|
name: NAMESPACE
|
|
value: openshift
|
|
- description: Username of the superuser account for initialization.
|
|
displayName: Superuser Username
|
|
name: PATRONI_SUPERUSER_USERNAME
|
|
value: postgres
|
|
- description: Password of the superuser account for initialization.
|
|
displayName: Superuser Passsword
|
|
name: PATRONI_SUPERUSER_PASSWORD
|
|
value: postgres
|
|
- description: Username of the replication account for initialization.
|
|
displayName: Replication Username
|
|
name: PATRONI_REPLICATION_USERNAME
|
|
value: postgres
|
|
- description: Password of the replication account for initialization.
|
|
displayName: Repication Passsword
|
|
name: PATRONI_REPLICATION_PASSWORD
|
|
value: postgres
|
|
- description: Service account name used for pods and rolebindings to form a cluster in the project.
|
|
displayName: Service Account
|
|
name: SERVICE_ACCOUNT
|
|
value: patroni-persistent
|
|
- description: The size of the persistent volume to create.
|
|
displayName: Persistent Volume Size
|
|
name: PVC_SIZE
|
|
value: 5Gi
|