chore(postgresql-cluster):adjust patroni config use configmap

Author: EamonZhang

addons/postgresql-cluster/15/chart/postgresql/templates/_helpers.tpl

@@ -42,6 +42,16 @@ Create the name of the service account to use.
 {{- end -}}
 {{- end -}}
 
+{{/*
+Return true if a configmap object should be created for MySQL Secondary
+*/}}
+{{- define "patroni.createConfigmap" -}}
+{{- if and .Values.configuration }}
+    {{- true -}}
+{{- else -}}
+{{- end -}}
+{{- end -}}
+
 {{/*
 Create patroni envs.
 */}}

addons/postgresql-cluster/15/chart/postgresql/templates/configmap.yaml

@@ -0,0 +1,19 @@
+{{- if (include "patroni.createConfigmap" .) }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ template "common.names.fullname" . }}-cm
+  namespace: {{ include "common.names.namespace" . | quote }}
+  labels: {{- include "common.labels.standard" . | nindent 4 }}
+    {{- if .Values.commonLabels }}
+    {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
+    {{- end }}
+    cluster-name: {{ template "patroni.fullname" . }}
+  {{- if .Values.commonAnnotations }}
+  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
+  {{- end }}
+data:
+  patroni.sh: |-
+    {{- include "common.tplvalues.render" ( dict "value" .Values.configuration "context" $ ) | nindent 4 }}
+{{- end -}}
+

addons/postgresql-cluster/15/chart/postgresql/templates/ep.yaml

@@ -1,8 +1,3 @@
-{{- /*
-Copyright VMware, Inc.
-SPDX-License-Identifier: APACHE-2.0
-*/}}
-
 {{- if .Values.networkPolicy.enabled }}
 kind: NetworkPolicy
 apiVersion: {{ template "common.capabilities.networkPolicy.apiVersion" . }}
@@ -13,6 +8,7 @@ metadata:
     {{- if .Values.commonLabels }}
     {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
     {{- end }}
+    cluster-name: {{ template "patroni.fullname" . }}
   {{- if .Values.commonAnnotations }}
   annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
   {{- end }}

addons/postgresql-cluster/15/chart/postgresql/templates/networkpolicy.yaml

@@ -26,10 +26,17 @@ spec:
         cluster-name: {{ template "patroni.fullname" . }}
     spec:
       serviceAccountName: {{ template "patroni.serviceAccountName" . }}
+    
+      # securityContext:
+      #   runAsUser: postgres
+      #   fsGroup: postgres
       containers:
       - name: {{ .Chart.Name }}
         image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
         imagePullPolicy: {{ .Values.image.pullPolicy }}
+        # securityContext: 
+        #   runAsUser: postgres
+        #   fsGroup: postgres
         env:
         {{- include "patroni.envs" . | indent 8 }} 
         {{- if .Values.env }}
@@ -78,9 +85,9 @@ spec:
         volumeMounts:
         - name: storage-volume
           mountPath: "{{ .Values.persistentVolume.mountPath }}"
-        # - mountPath: /etc/patroni
-        #   name: patroni-config
-        #   readOnly: true
+        - mountPath: "/opt/drycc/scripts/patroni/"
+          name: patroni-config
+          # readOnly: true
         {{- if .Values.walE.enable }}
         {{- if .Values.walE.kubernetesSecret }}
         - name: {{ .Values.walE.kubernetesSecret }}
@@ -110,8 +117,8 @@ spec:
     {{- end }}
       volumes:
       - name: patroni-config
-        secret:
-          secretName: {{ template "patroni.fullname" . }}
+        configMap:
+          name: {{ template "common.names.fullname" . }}-cm
       {{- if .Values.walE.enable }}
       {{- if .Values.walE.kubernetesSecret }}
       - name: {{ .Values.walE.kubernetesSecret }}

addons/postgresql-cluster/15/chart/postgresql/templates/statefulset.yaml

@@ -27,6 +27,52 @@ kubernetes:
 # Extra custom environment variables.
 env: {}
 
+#
+#custom patroni.yaml used by patroni boot
+# configuration: {}
+configuration: |
+  cat > /home/postgres/patroni.yml <<__EOF__
+  log:
+    level: DEBUG
+  bootstrap:
+    dcs:
+      postgresql:
+        use_pg_rewind: true
+        use_slots: true
+        pg_hba:
+        - host all all 0.0.0.0/0 scram-sha-256
+        - host replication ${PATRONI_REPLICATION_USERNAME} 0.0.0.0/0 scram-sha-256
+        parameters:
+          wal_level: hot_standby
+          hot_standby: "on"
+          max_connections: 1000
+          max_worker_processes: 8
+          wal_keep_segments: 8
+          max_wal_senders: 10
+          max_replication_slots: 10
+          max_prepared_transactions: 0
+          max_locks_per_transaction: 64
+          wal_log_hints: "on"
+          track_commit_timestamp: "off"
+          archive_mode: "on"
+          archive_timeout: 1800s
+    initdb:
+    - auth-host: scram-sha-256
+    - auth-local: trust
+    - encoding: UTF8
+    - locale: en_US.UTF-8
+    - data-checksums
+  restapi:
+    connect_address: '${PATRONI_KUBERNETES_POD_IP}:8008'
+  postgresql:
+    connect_address: '${PATRONI_KUBERNETES_POD_IP}:5432'
+    authentication:
+      superuser:
+        password: '${PATRONI_SUPERUSER_PASSWORD}'
+      replication:
+        password: '${PATRONI_REPLICATION_PASSWORD}'
+  __EOF__
+
 walE:
   # Specifies whether Wal-E should be enabled
   enable: false