Compare commits
20 Commits
postgres-c
...
postgres-c
Author | SHA1 | Date | |
---|---|---|---|
1e17a769dc | |||
78024a129f | |||
5cca3b2717 | |||
a70137cfbd | |||
dc4df55373 | |||
a3f42e13ce | |||
a48262f115 | |||
bd458a3a3d | |||
3aa9113d24 | |||
1fe8881dfb | |||
fa6067e68b | |||
8a50f22e31 | |||
deaa0c94d8 | |||
e251ff65ef | |||
245212e878 | |||
a7150e1d20 | |||
8d67cc9209 | |||
e57f859564 | |||
e98973b467 | |||
cb5c199d03 |
66
.gitea/workflows/release-charts-barman-cloud.yml
Normal file
66
.gitea/workflows/release-charts-barman-cloud.yml
Normal file
@@ -0,0 +1,66 @@
|
|||||||
|
name: release-charts-cloudfbarman-cloudlared
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
paths:
|
||||||
|
- "charts/barman-cloud/**"
|
||||||
|
|
||||||
|
workflow_dispatch:
|
||||||
|
|
||||||
|
env:
|
||||||
|
WORKFLOW_DIR: "charts/barman-cloud"
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
release:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: Set up Helm
|
||||||
|
uses: azure/setup-helm@v4
|
||||||
|
with:
|
||||||
|
token: ${{ secrets.GITEA_TOKEN }}
|
||||||
|
version: latest
|
||||||
|
|
||||||
|
- name: Package Helm Chart
|
||||||
|
run: |
|
||||||
|
cd $WORKFLOW_DIR
|
||||||
|
helm dependency build
|
||||||
|
echo "PACKAGE_PATH=$(helm package . | awk '{print $NF}')" >> $GITEA_ENV
|
||||||
|
|
||||||
|
- name: Publish Helm Chart to Harbor
|
||||||
|
run: |
|
||||||
|
helm registry login ${{ vars.REGISTRY_HOST }} -u ${{ vars.REGISTRY_USER }} -p ${{ secrets.REGISTRY_SECRET }}
|
||||||
|
helm push ${{ env.PACKAGE_PATH }} oci://${{ vars.REGISTRY_HOST }}/helm-charts
|
||||||
|
|
||||||
|
- name: Publish Helm Chart to Gitea
|
||||||
|
run: |
|
||||||
|
helm plugin install https://github.com/chartmuseum/helm-push
|
||||||
|
helm repo add --username ${{ gitea.actor }} --password ${{ secrets.REPOSITORY_TOKEN }} helm-charts https://${{ vars.REPOSITORY_HOST }}/api/packages/alexlebens/helm
|
||||||
|
helm cm-push ${{ env.PACKAGE_PATH }} helm-charts
|
||||||
|
|
||||||
|
- name: Extract Chart Metadata
|
||||||
|
run: |
|
||||||
|
cd $WORKFLOW_DIR
|
||||||
|
echo "CHART_VERSION=$(yq '.version' Chart.yaml)" >> $GITEA_ENV
|
||||||
|
echo "CHART_NAME=$(yq '.name' Chart.yaml)" >> $GITEA_ENV
|
||||||
|
|
||||||
|
- name: Release Helm Chart
|
||||||
|
uses: akkuman/gitea-release-action@v1
|
||||||
|
with:
|
||||||
|
name: ${{ env.CHART_NAME }}-${{ env.CHART_VERSION }}
|
||||||
|
tag_name: ${{ env.CHART_NAME }}-${{ env.CHART_VERSION }}
|
||||||
|
files: |-
|
||||||
|
${{ env.PACKAGE_PATH }}
|
||||||
|
|
||||||
|
- name: Actions Ntfy
|
||||||
|
run: |
|
||||||
|
curl \
|
||||||
|
-H "Authorization: Bearer ${{ secrets.NTFY_CRED }}" \
|
||||||
|
-H "Title: Chart Released: ${{ env.CHART_NAME }}-${{ env.CHART_VERSION }}" \
|
||||||
|
-H "Content-Type: text/plain" \
|
||||||
|
-d $'Repo: ${{ gitea.repository }}\nCommit: ${{ gitea.sha }}\nRef: ${{ gitea.ref }}\nStatus: ${{ job.status}}' \
|
||||||
|
${{ secrets.NTFY_URL }}
|
@@ -1,6 +1,6 @@
|
|||||||
apiVersion: v2
|
apiVersion: v2
|
||||||
name: postgres-cluster
|
name: postgres-cluster
|
||||||
version: 6.0.8
|
version: 6.4.3
|
||||||
description: Cloudnative-pg Cluster
|
description: Cloudnative-pg Cluster
|
||||||
keywords:
|
keywords:
|
||||||
- database
|
- database
|
||||||
|
@@ -1,6 +1,6 @@
|
|||||||
# postgres-cluster
|
# postgres-cluster
|
||||||
|
|
||||||
 
|
 
|
||||||
|
|
||||||
Cloudnative-pg Cluster
|
Cloudnative-pg Cluster
|
||||||
|
|
||||||
@@ -19,33 +19,11 @@ Cloudnative-pg Cluster
|
|||||||
|
|
||||||
| Key | Type | Default | Description |
|
| Key | Type | Default | Description |
|
||||||
|-----|------|---------|-------------|
|
|-----|------|---------|-------------|
|
||||||
| backup | object | `{"enabled":false,"method":"objectStore","objectStore":[{"clusterName":"","data":{"compression":"snappy","encryption":"","jobs":1},"destinationPath":"","endpointCA":{"create":false,"enabled":false,"key":"","name":""},"endpointCredentials":"","endpointURL":"","index":1,"isWALArchiver":true,"name":"external","retentionPolicy":"30d","wal":{"compression":"snappy","encryption":"","maxParallel":1}}],"scheduledBackups":[{"backupName":"external","backupOwnerReference":"self","name":"daily-backup","plugin":"barman-cloud.cloudnative-pg.io","schedule":"0 0 */3 * *","suspend":false}]}` | Backup settings |
|
| backup | object | `{"enabled":false,"method":"objectStore","objectStore":[],"scheduledBackups":[]}` | Backup settings |
|
||||||
| backup.enabled | bool | `false` | You need to configure backups manually, so backups are disabled by default. |
|
| backup.enabled | bool | `false` | You need to configure backups manually, so backups are disabled by default. |
|
||||||
| backup.method | string | `"objectStore"` | Method to create backups, options currently are only objectStore |
|
| backup.method | string | `"objectStore"` | Method to create backups, options currently are only objectStore |
|
||||||
| backup.objectStore | list | `[{"clusterName":"","data":{"compression":"snappy","encryption":"","jobs":1},"destinationPath":"","endpointCA":{"create":false,"enabled":false,"key":"","name":""},"endpointCredentials":"","endpointURL":"","index":1,"isWALArchiver":true,"name":"external","retentionPolicy":"30d","wal":{"compression":"snappy","encryption":"","maxParallel":1}}]` | Options for object store backups |
|
| backup.objectStore | list | `[]` | Options for object store backups |
|
||||||
| backup.objectStore[0].clusterName | string | `""` | Override the name of the backup cluster, defaults to "cluster.name" |
|
| backup.scheduledBackups | list | `[]` | List of scheduled backups |
|
||||||
| backup.objectStore[0].data.compression | string | `"snappy"` | Data compression method. One of `` (for no compression), `gzip`, `bzip2` or `snappy`. |
|
|
||||||
| backup.objectStore[0].data.encryption | string | `""` | Whether to instruct the storage provider to encrypt data files. One of `` (use the storage container default), `AES256` or `aws:kms`. |
|
|
||||||
| backup.objectStore[0].data.jobs | int | `1` | Number of data files to be archived or restored in parallel. |
|
|
||||||
| backup.objectStore[0].destinationPath | string | `""` | Overrides the provider specific default path. Defaults to: S3: s3://<bucket><path> Azure: https://<storageAccount>.<serviceName>.core.windows.net/<containerName><path> Google: gs://<bucket><path> |
|
|
||||||
| backup.objectStore[0].endpointCA | object | `{"create":false,"enabled":false,"key":"","name":""}` | Specifies a CA bundle to validate a privately signed certificate. |
|
|
||||||
| backup.objectStore[0].endpointCA.create | bool | `false` | Creates a secret with the given value if true, otherwise uses an existing secret. |
|
|
||||||
| backup.objectStore[0].endpointCredentials | string | `""` | Specifies secret that contains S3 credentials, should contain the keys ACCESS_KEY_ID and ACCESS_SECRET_KEY |
|
|
||||||
| backup.objectStore[0].endpointURL | string | `""` | Overrides the provider specific default endpoint. Defaults to: S3: https://s3.<region>.amazonaws.com" |
|
|
||||||
| backup.objectStore[0].index | int | `1` | Generate external cluster name, uses: {{ .Release.Name }}-postgresql-<major version>-backup-index-{{ index }} |
|
|
||||||
| backup.objectStore[0].isWALArchiver | bool | `true` | Specificies if this backup will do WALs |
|
|
||||||
| backup.objectStore[0].name | string | `"external"` | Object store backup name |
|
|
||||||
| backup.objectStore[0].retentionPolicy | string | `"30d"` | Retention policy for backups |
|
|
||||||
| backup.objectStore[0].wal | object | `{"compression":"snappy","encryption":"","maxParallel":1}` | Storage |
|
|
||||||
| backup.objectStore[0].wal.compression | string | `"snappy"` | WAL compression method. One of `` (for no compression), `gzip`, `bzip2` or `snappy`. |
|
|
||||||
| backup.objectStore[0].wal.encryption | string | `""` | Whether to instruct the storage provider to encrypt WAL files. One of `` (use the storage container default), `AES256` or `aws:kms`. |
|
|
||||||
| backup.objectStore[0].wal.maxParallel | int | `1` | Number of WAL files to be archived or restored in parallel. |
|
|
||||||
| backup.scheduledBackups[0].backupName | string | `"external"` | Name of backup target |
|
|
||||||
| backup.scheduledBackups[0].backupOwnerReference | string | `"self"` | Backup owner reference |
|
|
||||||
| backup.scheduledBackups[0].name | string | `"daily-backup"` | Scheduled backup name |
|
|
||||||
| backup.scheduledBackups[0].plugin | string | `"barman-cloud.cloudnative-pg.io"` | Backup method, can be `barman-cloud.cloudnative-pg.io` (default) |
|
|
||||||
| backup.scheduledBackups[0].schedule | string | `"0 0 */3 * *"` | Schedule in cron format |
|
|
||||||
| backup.scheduledBackups[0].suspend | bool | `false` | Temporarily stop scheduled backups from running |
|
|
||||||
| cluster | object | `{"additionalLabels":{},"affinity":{"enablePodAntiAffinity":true,"topologyKey":"kubernetes.io/hostname"},"annotations":{},"certificates":{},"enablePDB":true,"enableSuperuserAccess":false,"image":{"repository":"ghcr.io/cloudnative-pg/postgresql","tag":"17.5-1-bullseye"},"imagePullPolicy":"IfNotPresent","imagePullSecrets":[],"initdb":{},"instances":3,"logLevel":"info","monitoring":{"customQueries":[],"customQueriesSecret":[],"disableDefaultQueries":false,"enabled":false,"podMonitor":{"enabled":true,"metricRelabelings":[],"relabelings":[]},"prometheusRule":{"enabled":false,"excludeRules":[]}},"postgresGID":-1,"postgresUID":-1,"postgresql":{"ldap":{},"parameters":{"hot_standby_feedback":"on","max_slot_wal_keep_size":"2000MB","shared_buffers":"128MB"},"pg_hba":[],"pg_ident":[],"shared_preload_libraries":[],"synchronous":{}},"primaryUpdateMethod":"switchover","primaryUpdateStrategy":"unsupervised","priorityClassName":"","resources":{"limits":{"hugepages-2Mi":"256Mi"},"requests":{"cpu":"100m","memory":"256Mi"}},"roles":[],"serviceAccountTemplate":{},"services":{},"storage":{"size":"10Gi","storageClass":""},"superuserSecret":"","walStorage":{"enabled":true,"size":"2Gi","storageClass":""}}` | Cluster settings |
|
| cluster | object | `{"additionalLabels":{},"affinity":{"enablePodAntiAffinity":true,"topologyKey":"kubernetes.io/hostname"},"annotations":{},"certificates":{},"enablePDB":true,"enableSuperuserAccess":false,"image":{"repository":"ghcr.io/cloudnative-pg/postgresql","tag":"17.5-1-bullseye"},"imagePullPolicy":"IfNotPresent","imagePullSecrets":[],"initdb":{},"instances":3,"logLevel":"info","monitoring":{"customQueries":[],"customQueriesSecret":[],"disableDefaultQueries":false,"enabled":false,"podMonitor":{"enabled":true,"metricRelabelings":[],"relabelings":[]},"prometheusRule":{"enabled":false,"excludeRules":[]}},"postgresGID":-1,"postgresUID":-1,"postgresql":{"ldap":{},"parameters":{"hot_standby_feedback":"on","max_slot_wal_keep_size":"2000MB","shared_buffers":"128MB"},"pg_hba":[],"pg_ident":[],"shared_preload_libraries":[],"synchronous":{}},"primaryUpdateMethod":"switchover","primaryUpdateStrategy":"unsupervised","priorityClassName":"","resources":{"limits":{"hugepages-2Mi":"256Mi"},"requests":{"cpu":"100m","memory":"256Mi"}},"roles":[],"serviceAccountTemplate":{},"services":{},"storage":{"size":"10Gi","storageClass":""},"superuserSecret":"","walStorage":{"enabled":true,"size":"2Gi","storageClass":""}}` | Cluster settings |
|
||||||
| cluster.affinity | object | `{"enablePodAntiAffinity":true,"topologyKey":"kubernetes.io/hostname"}` | Affinity/Anti-affinity rules for Pods. See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-AffinityConfiguration |
|
| cluster.affinity | object | `{"enablePodAntiAffinity":true,"topologyKey":"kubernetes.io/hostname"}` | Affinity/Anti-affinity rules for Pods. See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-AffinityConfiguration |
|
||||||
| cluster.certificates | object | `{}` | The configuration for the CA and related certificates. See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesConfiguration |
|
| cluster.certificates | object | `{}` | The configuration for the CA and related certificates. See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesConfiguration |
|
||||||
@@ -85,7 +63,7 @@ Cloudnative-pg Cluster
|
|||||||
| nameOverride | string | `""` | Override the name of the cluster |
|
| nameOverride | string | `""` | Override the name of the cluster |
|
||||||
| namespaceOverride | string | `""` | Override the namespace of the chart |
|
| namespaceOverride | string | `""` | Override the namespace of the chart |
|
||||||
| poolers | list | `[]` | List of PgBouncer poolers |
|
| poolers | list | `[]` | List of PgBouncer poolers |
|
||||||
| recovery | object | `{"backup":{"backupName":"","database":"app","owner":"","pitrTarget":{"time":""}},"import":{"databases":[],"pgDumpExtraOptions":[],"pgRestoreExtraOptions":[],"postImportApplicationSQL":[],"roles":[],"schemaOnly":false,"source":{"database":"app","host":"","passwordSecret":{"create":false,"key":"password","name":"","value":""},"port":5432,"sslCertSecret":{"key":"","name":""},"sslKeySecret":{"key":"","name":""},"sslMode":"verify-full","sslRootCertSecret":{"key":"","name":""},"username":"app"},"type":"microservice"},"method":"backup","objectStore":{"clusterName":"","data":{"compression":"snappy","encryption":"","jobs":1},"database":"app","destinationPath":"","endpointCA":{"create":false,"enabled":false,"key":"","name":""},"endpointCredentials":"","endpointURL":"","index":1,"name":"recovery","owner":"","pitrTarget":{"time":""},"wal":{"compression":"snappy","encryption":"","maxParallel":1}},"pgBaseBackup":{"database":"app","owner":"","secret":"","source":{"database":"app","host":"","passwordSecret":{"create":false,"key":"password","name":"","value":""},"port":5432,"sslCertSecret":{"key":"","name":""},"sslKeySecret":{"key":"","name":""},"sslMode":"verify-full","sslRootCertSecret":{"key":"","name":""},"username":""}}}` | Recovery settings when booting cluster from external cluster |
|
| recovery | object | `{"backup":{"backupName":"","database":"app","owner":"","pitrTarget":{"time":""}},"import":{"databases":[],"pgDumpExtraOptions":[],"pgRestoreExtraOptions":[],"postImportApplicationSQL":[],"roles":[],"schemaOnly":false,"source":{"database":"app","host":"","passwordSecret":{"create":false,"key":"password","name":"","value":""},"port":5432,"sslCertSecret":{"key":"","name":""},"sslKeySecret":{"key":"","name":""},"sslMode":"verify-full","sslRootCertSecret":{"key":"","name":""},"username":"app"},"type":"microservice"},"method":"backup","objectStore":{"clusterName":"","data":{"compression":"snappy","encryption":"","jobs":1},"database":"app","destinationPath":"","endpointCA":{"create":false,"key":"","name":""},"endpointCredentials":"","endpointURL":"https://nyc3.digitaloceanspaces.com","index":1,"name":"recovery","owner":"","pitrTarget":{"time":""},"wal":{"compression":"snappy","encryption":"","maxParallel":1}},"pgBaseBackup":{"database":"app","owner":"","secret":"","source":{"database":"app","host":"","passwordSecret":{"create":false,"key":"password","name":"","value":""},"port":5432,"sslCertSecret":{"key":"","name":""},"sslKeySecret":{"key":"","name":""},"sslMode":"verify-full","sslRootCertSecret":{"key":"","name":""},"username":""}}}` | Recovery settings when booting cluster from external cluster |
|
||||||
| recovery.backup.backupName | string | `""` | Name of the backup to recover from. |
|
| recovery.backup.backupName | string | `""` | Name of the backup to recover from. |
|
||||||
| recovery.backup.database | string | `"app"` | Name of the database used by the application. Default: `app`. |
|
| recovery.backup.database | string | `"app"` | Name of the database used by the application. Default: `app`. |
|
||||||
| recovery.backup.owner | string | `""` | Name of the owner of the database in the instance to be used by applications. Defaults to the value of the `database` key. |
|
| recovery.backup.owner | string | `""` | Name of the owner of the database in the instance to be used by applications. Defaults to the value of the `database` key. |
|
||||||
@@ -110,10 +88,10 @@ Cloudnative-pg Cluster
|
|||||||
| recovery.objectStore.data.jobs | int | `1` | Number of data files to be archived or restored in parallel. |
|
| recovery.objectStore.data.jobs | int | `1` | Number of data files to be archived or restored in parallel. |
|
||||||
| recovery.objectStore.database | string | `"app"` | Name of the database used by the application. Default: `app`. |
|
| recovery.objectStore.database | string | `"app"` | Name of the database used by the application. Default: `app`. |
|
||||||
| recovery.objectStore.destinationPath | string | `""` | Overrides the provider specific default path. Defaults to: S3: s3://<bucket><path> Azure: https://<storageAccount>.<serviceName>.core.windows.net/<containerName><path> Google: gs://<bucket><path> |
|
| recovery.objectStore.destinationPath | string | `""` | Overrides the provider specific default path. Defaults to: S3: s3://<bucket><path> Azure: https://<storageAccount>.<serviceName>.core.windows.net/<containerName><path> Google: gs://<bucket><path> |
|
||||||
| recovery.objectStore.endpointCA | object | `{"create":false,"enabled":false,"key":"","name":""}` | Specifies a CA bundle to validate a privately signed certificate. |
|
| recovery.objectStore.endpointCA | object | `{"create":false,"key":"","name":""}` | Specifies a CA bundle to validate a privately signed certificate. |
|
||||||
| recovery.objectStore.endpointCA.create | bool | `false` | Creates a secret with the given value if true, otherwise uses an existing secret. |
|
| recovery.objectStore.endpointCA.create | bool | `false` | Creates a secret with the given value if true, otherwise uses an existing secret. |
|
||||||
| recovery.objectStore.endpointCredentials | string | `""` | Specifies secret that contains S3 credentials, should contain the keys ACCESS_KEY_ID and ACCESS_SECRET_KEY |
|
| recovery.objectStore.endpointCredentials | string | `""` | Specifies secret that contains S3 credentials, should contain the keys ACCESS_KEY_ID and ACCESS_SECRET_KEY |
|
||||||
| recovery.objectStore.endpointURL | string | `""` | Overrides the provider specific default endpoint. Defaults to: S3: https://s3.<region>.amazonaws.com" Leave empty if using the default S3 endpoint |
|
| recovery.objectStore.endpointURL | string | `"https://nyc3.digitaloceanspaces.com"` | Overrides the provider specific default endpoint. Defaults to: S3: https://s3.<region>.amazonaws.com" Leave empty if using the default S3 endpoint |
|
||||||
| recovery.objectStore.index | int | `1` | Generate external cluster name, uses: {{ .Release.Name }}-postgresql-<major version>-backup-index-{{ index }} |
|
| recovery.objectStore.index | int | `1` | Generate external cluster name, uses: {{ .Release.Name }}-postgresql-<major version>-backup-index-{{ index }} |
|
||||||
| recovery.objectStore.name | string | `"recovery"` | Object store backup name |
|
| recovery.objectStore.name | string | `"recovery"` | Object store backup name |
|
||||||
| recovery.objectStore.owner | string | `""` | Name of the owner of the database in the instance to be used by applications. Defaults to the value of the `database` key. |
|
| recovery.objectStore.owner | string | `""` | Name of the owner of the database in the instance to be used by applications. Defaults to the value of the `database` key. |
|
||||||
|
@@ -131,6 +131,8 @@ externalClusters:
|
|||||||
- name: {{ include "cluster.recoveryServerName" . }}
|
- name: {{ include "cluster.recoveryServerName" . }}
|
||||||
plugin:
|
plugin:
|
||||||
name: barman-cloud.cloudnative-pg.io
|
name: barman-cloud.cloudnative-pg.io
|
||||||
|
enabled: true
|
||||||
|
isWALArchiver: false
|
||||||
parameters:
|
parameters:
|
||||||
barmanObjectName: "{{ include "cluster.name" . }}-{{ .Values.recovery.objectStore.name }}"
|
barmanObjectName: "{{ include "cluster.name" . }}-{{ .Values.recovery.objectStore.name }}"
|
||||||
serverName: {{ include "cluster.recoveryServerName" . }}
|
serverName: {{ include "cluster.recoveryServerName" . }}
|
||||||
|
@@ -2,7 +2,7 @@
|
|||||||
Expand the name of the chart.
|
Expand the name of the chart.
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "cluster.name" -}}
|
{{- define "cluster.name" -}}
|
||||||
{{- if not (empty .Values.nameOverride ) }}
|
{{- if .Values.nameOverride }}
|
||||||
{{- .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
{{- .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
{{- printf "%s-postgresql-%s" .Release.Name ((semver .Values.cluster.image.tag).Major | toString) | trunc 63 | trimSuffix "-" -}}
|
{{- printf "%s-postgresql-%s" .Release.Name ((semver .Values.cluster.image.tag).Major | toString) | trunc 63 | trimSuffix "-" -}}
|
||||||
@@ -80,7 +80,7 @@ Generate recovery server name
|
|||||||
{{- if .Values.recovery.recoveryServerName -}}
|
{{- if .Values.recovery.recoveryServerName -}}
|
||||||
{{- .Values.recovery.recoveryServerName -}}
|
{{- .Values.recovery.recoveryServerName -}}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{- printf "%s-backup-%s" (include "cluster.name" .) (toString .Values.recovery.recoveryIndex) | trunc 63 | trimSuffix "-" -}}
|
{{- printf "%s-backup-%s" (include "cluster.name" .) (toString .Values.recovery.objectStore.index) | trunc 63 | trimSuffix "-" -}}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
@@ -94,3 +94,10 @@ Generate name for recovery object store credentials
|
|||||||
{{- printf "%s-backup-secret" (include "cluster.name" .) | trunc 63 | trimSuffix "-" -}}
|
{{- printf "%s-backup-secret" (include "cluster.name" .) | trunc 63 | trimSuffix "-" -}}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Generate name for backup object store credentials
|
||||||
|
*/}}
|
||||||
|
{{- define "cluster.backupCredentials" -}}
|
||||||
|
{{- printf "%s-backup-secret" (include "cluster.name" .) | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end }}
|
||||||
|
@@ -19,22 +19,28 @@ spec:
|
|||||||
{{- end }}
|
{{- end }}
|
||||||
postgresUID: {{ include "cluster.postgresUID" . }}
|
postgresUID: {{ include "cluster.postgresUID" . }}
|
||||||
postgresGID: {{ include "cluster.postgresGID" . }}
|
postgresGID: {{ include "cluster.postgresGID" . }}
|
||||||
{{ if or (and (.Values.backup.enabled) (eq .Values.backup.method "objectStore")) (eq .Values.recovery.method "objectStore") }}
|
{{ if or (eq .Values.backup.method "objectStore") (eq .Values.recovery.method "objectStore") }}
|
||||||
plugins:
|
plugins:
|
||||||
{{ end }}
|
{{ end }}
|
||||||
{{ if and (.Values.backup.enabled) (eq .Values.backup.method "objectStore") }}
|
{{- range $objectStore := .Values.backup.objectStore }}
|
||||||
{{ $context := . -}}
|
|
||||||
{{ range .Values.backup.objectStore -}}
|
|
||||||
- name: barman-cloud.cloudnative-pg.io
|
- name: barman-cloud.cloudnative-pg.io
|
||||||
isWALArchiver: {{ $context.isWALArchiver }}
|
enabled: true
|
||||||
|
isWALArchiver: {{ $objectStore.isWALArchiver | default true }}
|
||||||
parameters:
|
parameters:
|
||||||
barmanObjectName: "{{ include "cluster.name" . }}-{{ $context.name }}-backup"
|
barmanObjectName: "{{ include "cluster.name" $ }}-{{ $objectStore.name }}-backup"
|
||||||
{{ end -}}
|
{{- if $objectStore.clusterName }}
|
||||||
{{ end }}
|
serverName: "{{ $objectStore.clusterName }}-backup-{{ $objectStore.index }}"
|
||||||
|
{{- else }}
|
||||||
|
serverName: "{{ include "cluster.name" $ }}-backup-{{ $objectStore.index }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
{{ if eq .Values.recovery.method "objectStore" }}
|
{{ if eq .Values.recovery.method "objectStore" }}
|
||||||
- name: barman-cloud.cloudnative-pg.io
|
- name: barman-cloud.cloudnative-pg.io
|
||||||
|
enabled: true
|
||||||
|
isWALArchiver: false
|
||||||
parameters:
|
parameters:
|
||||||
barmanObjectName: "{{ include "cluster.name" . }}-{{ .Values.recovery.objectStore.name }}"
|
barmanObjectName: "{{ include "cluster.name" . }}-{{ .Values.recovery.objectStore.name }}"
|
||||||
|
serverName: {{ include "cluster.recoveryServerName" . }}
|
||||||
{{ end }}
|
{{ end }}
|
||||||
storage:
|
storage:
|
||||||
size: {{ .Values.cluster.storage.size }}
|
size: {{ .Values.cluster.storage.size }}
|
||||||
|
@@ -5,50 +5,49 @@
|
|||||||
apiVersion: barmancloud.cnpg.io/v1
|
apiVersion: barmancloud.cnpg.io/v1
|
||||||
kind: ObjectStore
|
kind: ObjectStore
|
||||||
metadata:
|
metadata:
|
||||||
name: "{{ include "cluster.name" $context }}-{{ $context.name }}-backup"
|
name: "{{ include "cluster.name" $context }}-{{ .name }}-backup"
|
||||||
namespace: {{ include "cluster.namespace" $context }}
|
namespace: {{ include "cluster.namespace" $context }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "cluster.labels" $context | nindent 4 }}
|
{{- include "cluster.labels" $context | nindent 4 }}
|
||||||
spec:
|
spec:
|
||||||
retentionPolicy: {{ $context.retentionPolicy }}
|
retentionPolicy: {{ .retentionPolicy | default "30d" }}
|
||||||
configuration:
|
configuration:
|
||||||
destinationPath: {{ $context.destinationPath }}
|
destinationPath: {{ .destinationPath | required "Destination path is required" }}
|
||||||
endpointURL: {{ $context.endpointURL }}
|
endpointURL: {{ .endpointURL | default "https://nyc3.digitaloceanspaces.com" }}
|
||||||
{{- if $context.endpointCA.enabled }}
|
{{- if .endpointCA }}
|
||||||
endpointCA:
|
endpointCA:
|
||||||
name: {{ $context.endpointCA.name }}
|
name: {{ .endpointCA.name }}
|
||||||
key: {{ $context.endpointCA.key }}
|
key: {{ .endpointCA.key }}
|
||||||
{{- end }}
|
|
||||||
{{- if not (empty $context.clusterName) }}
|
|
||||||
serverName: "{{ $context.clusterName }}-backup-{{ $context.index }}"
|
|
||||||
{{- else }}
|
|
||||||
serverName: "{{ include "cluster.name" $context }}-backup-{{ $context.index }}"
|
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
{{- if .wal }}
|
||||||
wal:
|
wal:
|
||||||
compression: {{ $context.wal.compression }}
|
compression: {{ .wal.compression | default "snappy" }}
|
||||||
{{- with $context.wal.encryption}}
|
{{ with .wal.encryption }}
|
||||||
encryption: {{ . }}
|
encryption: {{ . }}
|
||||||
{{- end }}
|
{{ end }}
|
||||||
maxParallel: {{ $context.wal.maxParallel }}
|
maxParallel: {{ .wal.maxParallel | default "1" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .wal }}
|
||||||
data:
|
data:
|
||||||
compression: {{ $context.data.compression }}
|
compression: {{ .data.compression | default "snappy" }}
|
||||||
{{- with $context.data.encryption }}
|
{{- with .data.encryption }}
|
||||||
encryption: {{ . }}
|
encryption: {{ . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
jobs: {{ $context.data.jobs }}
|
jobs: {{ .data.jobs | default 1 }}
|
||||||
|
{{- end }}
|
||||||
s3Credentials:
|
s3Credentials:
|
||||||
accessKeyId:
|
accessKeyId:
|
||||||
{{- if not (empty $context.endpointCredentials) }}
|
{{- if .endpointCredentials }}
|
||||||
name: {{ $context.endpointCredentials }}
|
name: {{ .endpointCredentials }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
name: {{- printf "%s-backup-secret" (include "cluster.name" $context) | trunc 63 | trimSuffix "-" -}}
|
name: {{ include "cluster.backupCredentials" $context }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
key: ACCESS_KEY_ID
|
key: ACCESS_KEY_ID
|
||||||
secretAccessKey:
|
secretAccessKey:
|
||||||
{{- if not (empty $context.endpointCredentials) }}
|
{{- if .endpointCredentials }}
|
||||||
name: {{ $context.endpointCredentials }}
|
name: {{ .endpointCredentials }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
name: {{- printf "%s-backup-secret" (include "cluster.name" $context) | trunc 63 | trimSuffix "-" -}}
|
name: {{ include "cluster.backupCredentials" $context }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
key: ACCESS_SECRET_KEY
|
key: ACCESS_SECRET_KEY
|
||||||
{{ end -}}
|
{{ end -}}
|
||||||
@@ -67,12 +66,11 @@ spec:
|
|||||||
configuration:
|
configuration:
|
||||||
destinationPath: {{ .Values.recovery.objectStore.destinationPath }}
|
destinationPath: {{ .Values.recovery.objectStore.destinationPath }}
|
||||||
endpointURL: {{ .Values.recovery.objectStore.endpointURL }}
|
endpointURL: {{ .Values.recovery.objectStore.endpointURL }}
|
||||||
{{- if .Values.recovery.objectStore.endpointCA.enabled }}
|
{{- if .Values.recovery.objectStore.endpointCA.name }}
|
||||||
endpointCA:
|
endpointCA:
|
||||||
name: {{ .Values.recovery.objectStore.endpointCA.name }}
|
name: {{ .Values.recovery.objectStore.endpointCA.name }}
|
||||||
key: {{ .Values.recovery.objectStore.endpointCA.key }}
|
key: {{ .Values.recovery.objectStore.endpointCA.key }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
serverName: {{ include "cluster.recoveryServerName" . }}
|
|
||||||
wal:
|
wal:
|
||||||
compression: {{ .Values.recovery.objectStore.wal.compression }}
|
compression: {{ .Values.recovery.objectStore.wal.compression }}
|
||||||
{{- with .Values.recovery.objectStore.wal.encryption}}
|
{{- with .Values.recovery.objectStore.wal.encryption}}
|
||||||
|
@@ -5,21 +5,21 @@
|
|||||||
apiVersion: postgresql.cnpg.io/v1
|
apiVersion: postgresql.cnpg.io/v1
|
||||||
kind: ScheduledBackup
|
kind: ScheduledBackup
|
||||||
metadata:
|
metadata:
|
||||||
name: "{{ include "cluster.name" $context }}-{{ $context.name }}-scheduled-backup"
|
name: "{{ include "cluster.name" $context }}-{{ .name }}-scheduled-backup"
|
||||||
namespace: {{ include "cluster.namespace" $context }}
|
namespace: {{ include "cluster.namespace" $context }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "cluster.labels" $context | nindent 4 }}
|
{{- include "cluster.labels" $context | nindent 4 }}
|
||||||
spec:
|
spec:
|
||||||
immediate: true
|
immediate: {{ .immediate | default true }}
|
||||||
suspend: {{ $context.suspend }}
|
suspend: {{ .suspend | default false }}
|
||||||
schedule: {{ $context.schedule | quote }}
|
schedule: {{ .schedule | quote | required "Schedule is required" }}
|
||||||
backupOwnerReference: {{ $context.backupOwnerReference }}
|
backupOwnerReference: {{ .backupOwnerReference | default "self" }}
|
||||||
cluster:
|
cluster:
|
||||||
name: {{ include "cluster.name" $context }}-cluster
|
name: {{ include "cluster.name" $context }}-cluster
|
||||||
method: plugin
|
method: plugin
|
||||||
pluginConfiguration:
|
pluginConfiguration:
|
||||||
name: {{ $context.plugin }}
|
name: {{ .plugin | default "barman-cloud.cloudnative-pg.io" }}
|
||||||
parameters:
|
parameters:
|
||||||
barmanObjectName: "{{ include "cluster.name" $context }}-{{ $context.backupName }}-backup"
|
barmanObjectName: "{{ include "cluster.name" $context }}-{{ .backupName }}-backup"
|
||||||
{{ end -}}
|
{{ end -}}
|
||||||
{{ end }}
|
{{ end }}
|
||||||
|
@@ -271,12 +271,10 @@ recovery:
|
|||||||
# -- Overrides the provider specific default endpoint. Defaults to:
|
# -- Overrides the provider specific default endpoint. Defaults to:
|
||||||
# S3: https://s3.<region>.amazonaws.com"
|
# S3: https://s3.<region>.amazonaws.com"
|
||||||
# Leave empty if using the default S3 endpoint
|
# Leave empty if using the default S3 endpoint
|
||||||
endpointURL: ""
|
endpointURL: "https://nyc3.digitaloceanspaces.com"
|
||||||
|
|
||||||
# -- Specifies a CA bundle to validate a privately signed certificate.
|
# -- Specifies a CA bundle to validate a privately signed certificate.
|
||||||
endpointCA:
|
endpointCA:
|
||||||
enabled: false
|
|
||||||
|
|
||||||
# -- Creates a secret with the given value if true, otherwise uses an existing secret.
|
# -- Creates a secret with the given value if true, otherwise uses an existing secret.
|
||||||
create: false
|
create: false
|
||||||
|
|
||||||
@@ -426,87 +424,91 @@ backup:
|
|||||||
method: objectStore
|
method: objectStore
|
||||||
|
|
||||||
# -- Options for object store backups
|
# -- Options for object store backups
|
||||||
objectStore:
|
objectStore: []
|
||||||
-
|
|
||||||
# -- Object store backup name
|
|
||||||
name: external
|
|
||||||
|
|
||||||
# -- Overrides the provider specific default path. Defaults to:
|
# -
|
||||||
# S3: s3://<bucket><path>
|
# # -- Object store backup name
|
||||||
# Azure: https://<storageAccount>.<serviceName>.core.windows.net/<containerName><path>
|
# name: external
|
||||||
# Google: gs://<bucket><path>
|
|
||||||
destinationPath: ""
|
|
||||||
|
|
||||||
# -- Overrides the provider specific default endpoint. Defaults to:
|
# # -- Overrides the provider specific default path. Defaults to:
|
||||||
# S3: https://s3.<region>.amazonaws.com"
|
# # S3: s3://<bucket><path>
|
||||||
endpointURL: "" # Leave empty if using the default S3 endpoint
|
# # Azure: https://<storageAccount>.<serviceName>.core.windows.net/<containerName><path>
|
||||||
|
# # Google: gs://<bucket><path>
|
||||||
|
# destinationPath: ""
|
||||||
|
|
||||||
# -- Specifies a CA bundle to validate a privately signed certificate.
|
# # -- Overrides the provider specific default endpoint. Defaults to:
|
||||||
endpointCA:
|
# # https://nyc3.digitaloceanspaces.com
|
||||||
enabled: false
|
# endpointURL: ""
|
||||||
|
|
||||||
# -- Creates a secret with the given value if true, otherwise uses an existing secret.
|
# # -- Specifies a CA bundle to validate a privately signed certificate.
|
||||||
create: false
|
# endpointCA:
|
||||||
|
# # -- Creates a secret with the given value if true, otherwise uses an existing secret.
|
||||||
|
# create: false
|
||||||
|
|
||||||
name: ""
|
# name: ""
|
||||||
key: ""
|
# key: ""
|
||||||
|
|
||||||
# -- Generate external cluster name, uses: {{ .Release.Name }}-postgresql-<major version>-backup-index-{{ index }}
|
# # -- Generate external cluster name, uses: {{ .Release.Name }}-postgresql-<major version>-backup-index-{{ index }}
|
||||||
index: 1
|
# index: 1
|
||||||
|
|
||||||
# -- Override the name of the backup cluster, defaults to "cluster.name"
|
# # -- Override the name of the backup cluster, defaults to "cluster.name"
|
||||||
clusterName: ""
|
# clusterName: ""
|
||||||
|
|
||||||
# -- Specifies secret that contains S3 credentials, should contain the keys ACCESS_KEY_ID and ACCESS_SECRET_KEY
|
# # -- Specifies secret that contains S3 credentials, should contain the keys ACCESS_KEY_ID and ACCESS_SECRET_KEY
|
||||||
endpointCredentials: ""
|
# endpointCredentials: ""
|
||||||
|
|
||||||
# -- Retention policy for backups
|
# # -- Retention policy for backups
|
||||||
retentionPolicy: "30d"
|
# retentionPolicy: "30d"
|
||||||
|
|
||||||
# -- Specificies if this backup will do WALs
|
# # -- Specificies if this backup will do WALs
|
||||||
isWALArchiver: true
|
# isWALArchiver: true
|
||||||
|
|
||||||
# -- Storage
|
# # -- Storage
|
||||||
wal:
|
# wal:
|
||||||
|
|
||||||
# -- WAL compression method. One of `` (for no compression), `gzip`, `bzip2` or `snappy`.
|
# # -- WAL compression method. One of `` (for no compression), `gzip`, `bzip2` or `snappy`.
|
||||||
compression: snappy
|
# compression: snappy
|
||||||
|
|
||||||
# -- Whether to instruct the storage provider to encrypt WAL files. One of `` (use the storage container default), `AES256` or `aws:kms`.
|
# # -- Whether to instruct the storage provider to encrypt WAL files. One of `` (use the storage container default), `AES256` or `aws:kms`.
|
||||||
encryption: ""
|
# encryption: ""
|
||||||
|
|
||||||
# -- Number of WAL files to be archived or restored in parallel.
|
# # -- Number of WAL files to be archived or restored in parallel.
|
||||||
maxParallel: 1
|
# maxParallel: 1
|
||||||
|
|
||||||
data:
|
# data:
|
||||||
# -- Data compression method. One of `` (for no compression), `gzip`, `bzip2` or `snappy`.
|
# # -- Data compression method. One of `` (for no compression), `gzip`, `bzip2` or `snappy`.
|
||||||
compression: snappy
|
# compression: snappy
|
||||||
|
|
||||||
# -- Whether to instruct the storage provider to encrypt data files. One of `` (use the storage container default), `AES256` or `aws:kms`.
|
# # -- Whether to instruct the storage provider to encrypt data files. One of `` (use the storage container default), `AES256` or `aws:kms`.
|
||||||
encryption: ""
|
# encryption: ""
|
||||||
|
|
||||||
# -- Number of data files to be archived or restored in parallel.
|
# # -- Number of data files to be archived or restored in parallel.
|
||||||
jobs: 1
|
# jobs: 1
|
||||||
|
|
||||||
scheduledBackups:
|
# -- List of scheduled backups
|
||||||
-
|
scheduledBackups: []
|
||||||
# -- Scheduled backup name
|
|
||||||
name: daily-backup
|
|
||||||
|
|
||||||
# -- Schedule in cron format
|
# -
|
||||||
schedule: "0 0 */3 * *"
|
# # -- Scheduled backup name
|
||||||
|
# name: daily-backup
|
||||||
|
|
||||||
# -- Temporarily stop scheduled backups from running
|
# # -- Schedule in cron format
|
||||||
suspend: false
|
# schedule: "0 0 0 * * *"
|
||||||
|
|
||||||
# -- Backup owner reference
|
# # -- Start backup on deployment
|
||||||
backupOwnerReference: self
|
# immediate: false
|
||||||
|
|
||||||
# -- Backup method, can be `barman-cloud.cloudnative-pg.io` (default)
|
# # -- Temporarily stop scheduled backups from running
|
||||||
plugin: barman-cloud.cloudnative-pg.io
|
# suspend: false
|
||||||
|
|
||||||
# -- Name of backup target
|
# # -- Backup owner reference
|
||||||
backupName: external
|
# backupOwnerReference: self
|
||||||
|
|
||||||
|
# # -- Backup method, can be `barman-cloud.cloudnative-pg.io` (default)
|
||||||
|
# plugin: barman-cloud.cloudnative-pg.io
|
||||||
|
|
||||||
|
# # -- Name of backup target
|
||||||
|
# backupName: external
|
||||||
|
|
||||||
# -- List of PgBouncer poolers
|
# -- List of PgBouncer poolers
|
||||||
poolers: []
|
poolers: []
|
||||||
|
Reference in New Issue
Block a user