-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathelassandra-orchid-dc1-0-sts-20201127.yaml
393 lines (393 loc) · 13.6 KB
/
elassandra-orchid-dc1-0-sts-20201127.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
apiVersion: apps/v1
kind: StatefulSet
metadata:
annotations:
datacenter-fingerprint: 99b91a3
datacenter-generation: "1"
creationTimestamp: "2020-01-16T10:17:51Z"
generation: 17
labels:
app: elassandra
app.kubernetes.io/managed-by: elassandra-operator
cluster: orchid
datacenter: dc1
parent: elassandra-orchid-dc1
rack: "0"
name: elassandra-orchid-dc1-0
namespace: default
ownerReferences:
- apiVersion: stable.strapdata.com/v1
blockOwnerDeletion: true
controller: true
kind: ElassandraDataCenter
name: elassandra-orchid-dc1
uid: 734f1151-3849-11ea-8c29-6255ee7682b2
resourceVersion: "36260389"
selfLink: /apis/apps/v1/namespaces/default/statefulsets/elassandra-orchid-dc1-0
uid: 73f132ce-3849-11ea-8c29-6255ee7682b2
spec:
podManagementPolicy: OrderedReady
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
app: elassandra
app.kubernetes.io/managed-by: elassandra-operator
cluster: orchid
datacenter: dc1
parent: elassandra-orchid-dc1
rack: "0"
serviceName: elassandra-orchid-dc1
template:
metadata:
annotations:
configmap-fingerprint: 4f154b4-19520b7
creationTimestamp: null
labels:
app: elassandra
app.kubernetes.io/managed-by: elassandra-operator
cluster: orchid
datacenter: dc1
parent: elassandra-orchid-dc1
rack: "0"
spec:
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: failure-domain.beta.kubernetes.io/zone
operator: In
values:
- "0"
containers:
- args:
- /tmp/sidecar-config-volume
- /tmp/operator-config
- /tmp/operator-config-rack
- /tmp/operator-config-seeds
- /tmp/user-config
- /tmp/operator-cluster-secret
env:
- name: JMX_PORT
value: "7199"
- name: CQLS_OPTS
value: --ssl
- name: ES_SCHEME
value: https
- name: HOST_NETWORK
value: "false"
- name: NAMESPACE
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
- name: POD_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.name
- name: NODE_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: spec.nodeName
- name: POD_IP
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: status.podIP
- name: SEED_HOST_ID
value: 00fff5db-4b73-4330-ba15-492204eb3955
- name: NODETOOL_OPTS
value: -u cassandra -pwf /etc/cassandra/jmxremote.password --ssl
- name: CASSANDRA_DAEMON
value: org.apache.cassandra.service.ElassandraDaemon
- name: JMX_PASSWORD
valueFrom:
secretKeyRef:
key: cassandra.jmx_password
name: elassandra-orchid
image: strapdata.azurecr.io/strapdata/elassandra-node-dev:6.2.3.28
imagePullPolicy: IfNotPresent
name: elassandra
ports:
- containerPort: 37000
protocol: TCP
- containerPort: 37001
protocol: TCP
- containerPort: 39042
protocol: TCP
- containerPort: 7199
protocol: TCP
- containerPort: 9200
protocol: TCP
- containerPort: 9300
protocol: TCP
readinessProbe:
exec:
command:
- /ready-probe.sh
- "39042"
- "9200"
failureThreshold: 3
initialDelaySeconds: 15
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
limits:
cpu: "4"
memory: 4Gi
requests:
cpu: "1"
memory: 4Gi
securityContext:
capabilities:
add:
- IPC_LOCK
- SYS_RESOURCE
runAsUser: 999
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: FallbackToLogsOnError
volumeMounts:
- mountPath: /var/lib/cassandra
name: data-volume
- mountPath: /nodeinfo
name: nodeinfo
- mountPath: /tmp/sidecar-config-volume
name: sidecar-config-volume
- mountPath: /var/log/cassandra
name: cassandra-log-volume
- mountPath: /home/cassandra/.cassandra/cqlshrc
name: cqlshrc-volume
subPath: cqlshrc
- mountPath: /home/cassandra/.curlrc
name: curlrc-volume
subPath: .curlrc
- mountPath: /home/cassandra/.cassandra/nodetool-ssl.properties
name: nodetool-ssl-volume
subPath: nodetool-ssl.properties
- mountPath: /tmp/operator-config
name: operator-config-volume-spec
- mountPath: /tmp/operator-config-rack
name: operator-config-volume-rack
- mountPath: /tmp/operator-config-seeds
name: operator-config-volume-seeds
- mountPath: /tmp/user-config
name: user-config-volume
- mountPath: /tmp/operator-keystore
name: operator-keystore
- mountPath: /tmp/operator-truststore
name: operator-truststore
- mountPath: /tmp/operator-cluster-secret
name: operator-cluster-secret
dnsPolicy: ClusterFirst
initContainers:
- command:
- sysctl
- -w
- vm.max_map_count=1048575
image: busybox
imagePullPolicy: Always
name: increase-vm-max-map-count
resources: {}
securityContext:
privileged: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: FallbackToLogsOnError
- command:
- sh
- -c
- cp $JAVA_HOME/jre/lib/security/cacerts /tmp/sidecar-truststore/ && keytool
-import -trustcacerts -keystore /tmp/sidecar-truststore/cacerts -storepass
changeit -alias strapkop -noprompt -file /tmp/operator-truststore/cacert.pem
image: openjdk:alpine
imagePullPolicy: IfNotPresent
name: merge-trust-certs
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: FallbackToLogsOnError
volumeMounts:
- mountPath: /tmp/operator-truststore
name: operator-truststore
- mountPath: /tmp/sidecar-truststore
name: sidecar-config-volume
- command:
- sh
- -c
- kubectl get no ${NODE_NAME} --token="$NODEINFO_TOKEN" -o go-template='{{index.metadata.labels
"failure-domain.beta.kubernetes.io/zone"}}' | awk '!/<no value>/ { print
$0 }' > /nodeinfo/zone && kubectl get no ${NODE_NAME} --token="$NODEINFO_TOKEN"
-o go-template='{{index.metadata.labels "beta.kubernetes.io/instance-type"}}'|
awk '!/<no value>/ { print $0 }' > /nodeinfo/instance-type && kubectl get
no ${NODE_NAME} --token="$NODEINFO_TOKEN" -o go-template='{{index.metadata.labels
"storagetier"}}' | awk '!/<no value>/ { print $0 }' > /nodeinfo/storagetier &&
grep ^ /nodeinfo/*
env:
- name: NODE_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: spec.nodeName
- name: NODEINFO_TOKEN
value: eyJhbGciOiJSUzI1NiIsImtpZCI6IiJ9.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.QYYWPs_JPmeg0KY6BGunjgGjJYGaG95q0Gjkvh_hqI5-DvctT_qPhqNTwwIndfMRs2mDwHmEU8sJoFoDViQZRwAFVbLt2WFaO5HpZrbzFRnVa1Kuz_-i8NcBuZnlL1SI9kHx74CfXRnXZSMMDPBfM5KgRu4OzkmXfXkiIypcR2ocVNJTE-RxNf8IfEVXVAqZWiBIaZXq9_X2ulotn7RCyOwm_m_i0o4Xyfs20Bj3OTYcJa40l-q1FahWVHK916mWE9I4ayPwS8KzutlTWf5Afms2ektkjYuT8CRslaBgHXZCUpRG3OK0NCibDxlwmHUkOb82A6AjepPA2O_SxeJypkliANN796YkJ3DBVK4kcMnG6NRVNnpp3MIwQWe8lkpDXyCqi82xtImEVql6q9sLg2EC3_q7NvusHNuuyC_HE3dFi63KMpif5tvv27M-AIXoOoPqLNCTJTy-GnKUf_6lnNdXNTlKCil1EUb5QH20vuezjvWQx9DSZzv_UqbF5KOsOHCjER3PSvQXYei8Ln9zLjtvRKyG5rJ1TUmJ0810IUOaodieQymdW-cJBjemFxFQFDamJUx63_qaMAX1HmOEVvGzxUNQZMfrMurllJWRLUmc7tq8NgvnCiXFykMLgGh91iFWi00MDQaTY9X_t_8aw2Rq-PScrddfTZv6TFeyC58
image: bitnami/kubectl
imagePullPolicy: Always
name: nodeinfo
resources: {}
securityContext: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: FallbackToLogsOnError
volumeMounts:
- mountPath: /nodeinfo
name: nodeinfo
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
fsGroup: 999
terminationGracePeriodSeconds: 30
volumes:
- downwardAPI:
defaultMode: 420
items:
- fieldRef:
apiVersion: v1
fieldPath: metadata.labels
path: labels
- fieldRef:
apiVersion: v1
fieldPath: metadata.annotations
path: annotations
- fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
path: namespace
- fieldRef:
apiVersion: v1
fieldPath: metadata.name
path: name
name: pod-info
- emptyDir: {}
name: sidecar-config-volume
- emptyDir: {}
name: sidecar-truststore-volume
- emptyDir: {}
name: cassandra-log-volume
- emptyDir: {}
name: nodeinfo
- name: cqlshrc-volume
secret:
defaultMode: 420
items:
- key: cqlshrc
mode: 256
path: cqlshrc
secretName: elassandra-orchid-rc
- name: curlrc-volume
secret:
defaultMode: 420
items:
- key: curlrc
mode: 256
path: .curlrc
secretName: elassandra-orchid-rc
- name: nodetool-ssl-volume
secret:
defaultMode: 420
items:
- key: nodetool-ssl.properties
mode: 256
path: nodetool-ssl.properties
secretName: elassandra-orchid-rc
- configMap:
defaultMode: 420
items:
- key: cassandra_yaml_d_001_spec_yaml
path: cassandra.yaml.d/001-spec.yaml
- key: jvm_options_d_001_jmx_options
path: jvm.options.d/001-jmx.options
- key: cassandra_env_sh_d_001_cassandra_jdb_sh
path: cassandra-env.sh.d/001-cassandra-jdb.sh
- key: cassandra_yaml_d_002_ssl_yaml
path: cassandra.yaml.d/002-ssl.yaml
- key: cassandra_yaml_d_002_authentication_yaml
path: cassandra.yaml.d/002-authentication.yaml
- key: elasticsearch_yml_d_002_enterprise_yaml
path: elasticsearch.yml.d/002-enterprise.yaml
- key: cassandra_env_sh_d_002_enterprise_sh
path: cassandra-env.sh.d/002-enterprise.sh
name: elassandra-orchid-dc1-spec-4f154b4
name: operator-config-volume-spec
- configMap:
defaultMode: 420
items:
- key: cassandra_rackdc_properties
path: cassandra-rackdc.properties
- key: cassandra_topology_properties
path: cassandra-topology.properties
name: elassandra-orchid-dc1-0
name: operator-config-volume-rack
- configMap:
defaultMode: 420
items:
- key: cassandra_yaml_d_003_cassandra_seeds_yaml
path: cassandra.yaml.d/003-cassandra-seeds.yaml
name: elassandra-orchid-dc1-seeds
name: operator-config-volume-seeds
- configMap:
defaultMode: 420
items:
- key: cassandra_yaml_d_user_config_overrides_yaml
path: cassandra.yaml.d/009-user_config_overrides.yaml
name: elassandra-orchid-dc1-user-config
name: user-config-volume
- name: operator-keystore
secret:
defaultMode: 420
items:
- key: keystore.p12
path: keystore.p12
secretName: elassandra-orchid-dc1-keystore
- name: operator-truststore
secret:
defaultMode: 420
items:
- key: cacert.pem
path: cacert.pem
- key: truststore.p12
path: truststore.p12
secretName: ca-pub
- name: operator-cluster-secret
secret:
defaultMode: 420
items:
- key: shared-secret.yaml
path: elasticsearch.yml.d/003-shared-secret.yaml
secretName: elassandra-orchid
updateStrategy:
rollingUpdate:
partition: 0
type: RollingUpdate
volumeClaimTemplates:
- metadata:
creationTimestamp: null
name: data-volume
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 128Gi
volumeMode: Filesystem
status:
phase: Pending
status:
collisionCount: 0
currentReplicas: 1
currentRevision: elassandra-orchid-dc1-0-96688d7c7
observedGeneration: 17
readyReplicas: 1
replicas: 1
updateRevision: elassandra-orchid-dc1-0-96688d7c7
updatedReplicas: 1