mirror of
https://github.com/gitpod-io/gitpod.git
synced 2025-12-08 17:36:30 +00:00
97f8d4b802
* Ensure the spread of pods on different nodes * Replace string ClusterFirst * Replace Always string in DNSPolicy * Fix registry-facade affinity * Fix ws-proxy affinity * Address feedback * Update golden files
97 lines
3.2 KiB
Go
97 lines
3.2 KiB
Go
// Copyright (c) 2021 Gitpod GmbH. All rights reserved.
|
|
// Licensed under the GNU Affero General Public License (AGPL).
|
|
// See License.AGPL.txt in the project root for license information.
|
|
|
|
// This runs the init scripts in a non-inCluster DB instance
|
|
|
|
package init
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/gitpod-io/gitpod/installer/pkg/common"
|
|
batchv1 "k8s.io/api/batch/v1"
|
|
corev1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
"k8s.io/utils/pointer"
|
|
)
|
|
|
|
func job(ctx *common.RenderContext) ([]runtime.Object, error) {
|
|
if disableMigration := common.IsDatabaseMigrationDisabled(ctx); disableMigration {
|
|
return nil, nil
|
|
}
|
|
|
|
objectMeta := metav1.ObjectMeta{
|
|
Name: fmt.Sprintf("%s-session", Component),
|
|
Namespace: ctx.Namespace,
|
|
Labels: common.CustomizeLabel(ctx, Component, common.TypeMetaBatchJob),
|
|
Annotations: common.CustomizeAnnotation(ctx, Component, common.TypeMetaBatchJob),
|
|
}
|
|
|
|
volumes := []corev1.Volume{{
|
|
Name: sqlInitScripts,
|
|
VolumeSource: corev1.VolumeSource{ConfigMap: &corev1.ConfigMapVolumeSource{
|
|
LocalObjectReference: corev1.LocalObjectReference{Name: sqlInitScripts},
|
|
}},
|
|
}}
|
|
volumeMounts := []corev1.VolumeMount{{
|
|
Name: sqlInitScripts,
|
|
MountPath: "/db-init-scripts",
|
|
ReadOnly: true,
|
|
}}
|
|
|
|
// We already have CA loaded at common.DBCaCertEnvVarName, but mysql cli needs a file here, so we mount it like as one.
|
|
sslOptions := ""
|
|
if ctx.Config.Database.SSL != nil && ctx.Config.Database.SSL.CaCert != nil {
|
|
volumes = append(volumes, corev1.Volume{
|
|
Name: caCertMountName,
|
|
VolumeSource: corev1.VolumeSource{Secret: &corev1.SecretVolumeSource{
|
|
SecretName: ctx.Config.Database.SSL.CaCert.Name,
|
|
}},
|
|
})
|
|
volumeMounts = append(volumeMounts, corev1.VolumeMount{
|
|
Name: caCertMountName,
|
|
MountPath: common.DBCaBasePath,
|
|
ReadOnly: true,
|
|
})
|
|
sslOptions = fmt.Sprintf(" --ssl-mode=VERIFY_IDENTITY --ssl-ca=%s ", common.DBCaPath)
|
|
}
|
|
|
|
return []runtime.Object{&batchv1.Job{
|
|
TypeMeta: common.TypeMetaBatchJob,
|
|
ObjectMeta: objectMeta,
|
|
Spec: batchv1.JobSpec{
|
|
TTLSecondsAfterFinished: pointer.Int32(60),
|
|
Template: corev1.PodTemplateSpec{
|
|
ObjectMeta: objectMeta,
|
|
Spec: corev1.PodSpec{
|
|
RestartPolicy: corev1.RestartPolicyNever,
|
|
ServiceAccountName: Component,
|
|
EnableServiceLinks: pointer.Bool(false),
|
|
Volumes: volumes,
|
|
// The init container is designed to emulate Helm hooks
|
|
InitContainers: []corev1.Container{*common.DatabaseWaiterContainer(ctx)},
|
|
Containers: []corev1.Container{{
|
|
Name: fmt.Sprintf("%s-session", Component),
|
|
Image: ctx.ImageName(common.ThirdPartyContainerRepo(ctx.Config.Repository, ""), dbSessionsImage, dbSessionsTag),
|
|
ImagePullPolicy: corev1.PullIfNotPresent,
|
|
Env: common.MergeEnv(
|
|
common.DatabaseEnv(&ctx.Config),
|
|
),
|
|
SecurityContext: &corev1.SecurityContext{
|
|
AllowPrivilegeEscalation: pointer.Bool(false),
|
|
},
|
|
Command: []string{
|
|
"sh",
|
|
"-c",
|
|
fmt.Sprintf("mysql -h $DB_HOST --port $DB_PORT -u $DB_USERNAME -p$DB_PASSWORD %s< /db-init-scripts/init.sql", sslOptions),
|
|
},
|
|
VolumeMounts: volumeMounts,
|
|
}},
|
|
},
|
|
},
|
|
},
|
|
}}, nil
|
|
}
|