Commit 16ad5d96 authored by Lluis Gifre Renom's avatar Lluis Gifre Renom
Browse files

Context component: 

- reviewing integration with CockroachDB
- reviewing context REST API
- reviewing database schema
- reviewing code
parent 40319915

manifests/cockroachdb/README.md

0 → 100644
+53 −0
Original line number Diff line number Diff line 
# Ref: https://www.cockroachlabs.com/docs/stable/configure-cockroachdb-kubernetes.html



DEPLOY_PATH="manifests/cockroachdb"

OPERATOR_BASE_URL="https://raw.githubusercontent.com/cockroachdb/cockroach-operator/master"



mkdir -p ${DEPLOY_PATH}



# Apply Custom Resource Definition for the CockroachDB Operator

curl -o "${DEPLOY_PATH}/crds.yaml" "${OPERATOR_BASE_URL}/install/crds.yaml"

kubectl apply -f "${DEPLOY_PATH}/crds.yaml"



# Deploy CockroachDB Operator

curl -o "${DEPLOY_PATH}/operator.yaml" "${OPERATOR_BASE_URL}/install/operator.yaml"

# edit "${DEPLOY_PATH}/operator.yaml"

# - add env var: WATCH_NAMESPACE='tfs-ccdb'

kubectl apply -f "${DEPLOY_PATH}/operator.yaml"



# Deploy CockroachDB

curl -o "${DEPLOY_PATH}/cluster.yaml" "${OPERATOR_BASE_URL}/examples/example.yaml"

# edit "${DEPLOY_PATH}/cluster.yaml"

# - set version

# - set number of replicas

kubectl create namespace tfs-ccdb

kubectl apply --namespace tfs-ccdb -f "${DEPLOY_PATH}/cluster.yaml"



# Deploy CockroachDB Client

curl -o "${DEPLOY_PATH}/client-secure-operator.yaml" "${OPERATOR_BASE_URL}/examples/client-secure-operator.yaml"

kubectl create --namespace tfs-ccdb -f "${DEPLOY_PATH}/client-secure-operator.yaml"



# Add tfs user with admin rights

$ kubectl exec -it ccdb-client-secure --namespace tfs-ccdb -- ./cockroach sql --certs-dir=/cockroach/cockroach-certs --host=cockroachdb-public

-- CREATE USER tfs WITH PASSWORD 'tfs123';

-- GRANT admin TO tfs;



# Expose CockroachDB SQL port (26257)

PORT=$(kubectl --namespace cockroachdb get service cockroachdb-public -o 'jsonpath={.spec.ports[?(@.name=="sql")].port}')

PATCH='{"data": {"'${PORT}'": "cockroachdb/cockroachdb-public:'${PORT}'"}}'

kubectl patch configmap nginx-ingress-tcp-microk8s-conf --namespace ingress --patch "${PATCH}"



PORT_MAP='{"containerPort": '${PORT}', "hostPort": '${PORT}'}'

CONTAINER='{"name": "nginx-ingress-microk8s", "ports": ['${PORT_MAP}']}'

PATCH='{"spec": {"template": {"spec": {"containers": ['${CONTAINER}']}}}}'

kubectl patch daemonset nginx-ingress-microk8s-controller --namespace ingress --patch "${PATCH}"



# Expose CockroachDB Console port (8080)

PORT=$(kubectl --namespace cockroachdb get service cockroachdb-public -o 'jsonpath={.spec.ports[?(@.name=="http")].port}')

PATCH='{"data": {"'${PORT}'": "cockroachdb/cockroachdb-public:'${PORT}'"}}'

kubectl patch configmap nginx-ingress-tcp-microk8s-conf --namespace ingress --patch "${PATCH}"



PORT_MAP='{"containerPort": '${PORT}', "hostPort": '${PORT}'}'

CONTAINER='{"name": "nginx-ingress-microk8s", "ports": ['${PORT_MAP}']}'

PATCH='{"spec": {"template": {"spec": {"containers": ['${CONTAINER}']}}}}'

kubectl patch daemonset nginx-ingress-microk8s-controller --namespace ingress --patch "${PATCH}"

manifests/cockroachdb/client-secure-operator.yaml

0 → 100644
+51 −0
Original line number Diff line number Diff line 
# Copyright 2022 The Cockroach Authors

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

#     https://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

#

# Generated, do not edit. Please edit this file instead: config/templates/client-secure-operator.yaml.in

#



apiVersion: v1

kind: Pod

metadata:

  name: cockroachdb-client-secure

spec:

  serviceAccountName: cockroachdb-sa

  containers:

  - name: cockroachdb-client-secure

    image: cockroachdb/cockroach:v22.1.8

    imagePullPolicy: IfNotPresent

    volumeMounts:

    - name: client-certs

      mountPath: /cockroach/cockroach-certs/

    command:

    - sleep

    - "2147483648" # 2^31

  terminationGracePeriodSeconds: 0

  volumes:

  - name: client-certs

    projected:

        sources:

          - secret:

              name: cockroachdb-node

              items:

                - key: ca.crt

                  path: ca.crt

          - secret:

              name: cockroachdb-root

              items:

                - key: tls.crt

                  path: client.root.crt

                - key: tls.key

                  path: client.root.key

        defaultMode: 256

manifests/cockroachdb/cluster.yaml

0 → 100644
+70 −0
Original line number Diff line number Diff line 
# Copyright 2022 The Cockroach Authors

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

#     https://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

#

# Generated, do not edit. Please edit this file instead: config/templates/example.yaml.in

#



apiVersion: crdb.cockroachlabs.com/v1alpha1

kind: CrdbCluster

metadata:

  # this translates to the name of the statefulset that is created

  name: cockroachdb

spec:

  dataStore:

    pvc:

      spec:

        accessModes:

          - ReadWriteOnce

        resources:

          requests:

            storage: "60Gi"

        volumeMode: Filesystem

  resources:

    requests:

      # This is intentionally low to make it work on local k3d clusters.

      cpu: 100m

      memory: 1Gi

    limits:

      cpu: 1

      memory: 4Gi

  tlsEnabled: true

# You can set either a version of the db or a specific image name

# cockroachDBVersion: v22.1.12

  image:

    name: cockroachdb/cockroach:v22.1.12

  # nodes refers to the number of crdb pods that are created

  # via the statefulset

  nodes: 3

  additionalLabels:

    crdb: is-cool

  # affinity is a new API field that is behind a feature gate that is

  # disabled by default.  To enable please see the operator.yaml file.



  # The affinity field will accept any podSpec affinity rule.

  # affinity:

  #   podAntiAffinity:

  #      preferredDuringSchedulingIgnoredDuringExecution:

  #      - weight: 100

  #        podAffinityTerm:

  #          labelSelector:

  #            matchExpressions:

  #            - key: app.kubernetes.io/instance

  #              operator: In

  #              values:

  #              - cockroachdb

  #          topologyKey: kubernetes.io/hostname



  # nodeSelectors used to match against

  # nodeSelector:

  #   worker-pool-name: crdb-workers

manifests/cockroachdb/crds.yaml

0 → 100644
+1385 −0

File added.

Preview size limit exceeded, changes collapsed.