192 lines
4.6 KiB
YAML
192 lines
4.6 KiB
YAML
---
|
||
|
||
# 创建 Namespace
|
||
apiVersion: v1
|
||
kind: Namespace
|
||
metadata:
|
||
name: hty1024-db
|
||
|
||
---
|
||
|
||
# 创建 StorageClass
|
||
apiVersion: storage.k8s.io/v1
|
||
kind: StorageClass
|
||
metadata:
|
||
name: storage-local-postgres
|
||
labels:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: storageClass
|
||
provisioner: kubernetes.io/no-provisioner
|
||
reclaimPolicy: Retain
|
||
volumeBindingMode: WaitForFirstConsumer
|
||
|
||
---
|
||
|
||
# 创建 PersistentVolume
|
||
apiVersion: v1
|
||
kind: PersistentVolume
|
||
metadata:
|
||
name: hty1024-db-postgres-pv
|
||
labels:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: persistentVolume
|
||
spec:
|
||
capacity:
|
||
storage: 20Gi
|
||
volumeMode: Filesystem
|
||
accessModes:
|
||
- ReadWriteOnce
|
||
persistentVolumeReclaimPolicy: Retain
|
||
storageClassName: storage-local-postgres
|
||
local:
|
||
path: /app/postgres/data
|
||
nodeAffinity:
|
||
required:
|
||
nodeSelectorTerms:
|
||
- matchExpressions:
|
||
- key: node.k8s.hty1024.com/type
|
||
operator: In
|
||
values:
|
||
- app
|
||
|
||
---
|
||
|
||
# 创建 PersistentVolumeClaim
|
||
apiVersion: v1
|
||
kind: PersistentVolumeClaim
|
||
metadata:
|
||
name: hty1024-db-postgres-pvc
|
||
namespace: hty1024-db
|
||
labels:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||
spec:
|
||
resources:
|
||
requests:
|
||
storage: 20Gi
|
||
volumeMode: Filesystem
|
||
accessModes:
|
||
- ReadWriteOnce
|
||
storageClassName: storage-local-postgres
|
||
|
||
---
|
||
|
||
# 创建 Secret（自定义 PostgreSQL 用户密码）
|
||
apiVersion: v1
|
||
kind: Secret
|
||
metadata:
|
||
name: hty1024-db-postgres-secret
|
||
namespace: hty1024-db
|
||
labels:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: secret
|
||
type: Opaque
|
||
stringData:
|
||
postgres.key: |
|
||
123456
|
||
immutable: true
|
||
|
||
---
|
||
|
||
# 创建 Service
|
||
apiVersion: v1
|
||
kind: Service
|
||
metadata:
|
||
name: hty1024-db-postgres-service
|
||
namespace: hty1024-db
|
||
labels:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: service
|
||
spec:
|
||
type: ClusterIP
|
||
ports:
|
||
- port: 5432
|
||
targetPort: 5432
|
||
selector:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: pod
|
||
|
||
---
|
||
|
||
# 创建 StatefulSet
|
||
apiVersion: apps/v1
|
||
kind: StatefulSet
|
||
metadata:
|
||
name: hty1024-db-postgres-statefulset
|
||
namespace: hty1024-db
|
||
labels:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: statefulSet
|
||
spec:
|
||
replicas: 1
|
||
minReadySeconds: 30
|
||
selector:
|
||
matchLabels:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: pod
|
||
template:
|
||
metadata:
|
||
labels:
|
||
app.k8s.hty1024.com/env: prod
|
||
app.k8s.hty1024.com/type: db
|
||
app.k8s.hty1024.com/name: postgres
|
||
app.k8s.hty1024.com/version: 16.4-alpine3.20
|
||
app.k8s.hty1024.com/resources: pod
|
||
spec:
|
||
terminationGracePeriodSeconds: 60
|
||
volumes:
|
||
- name: localtime
|
||
hostPath:
|
||
path: /etc/localtime
|
||
- name: hty1024-db-postgres-data
|
||
persistentVolumeClaim:
|
||
claimName: hty1024-db-postgres-pvc
|
||
- name: hty1024-db-postgres-pwd
|
||
secret:
|
||
secretName: hty1024-db-postgres-secret
|
||
containers:
|
||
- name: postgres
|
||
image: postgres:16.4-alpine3.20
|
||
ports:
|
||
- name: tcp
|
||
containerPort: 5432
|
||
volumeMounts:
|
||
- name: localtime
|
||
mountPath: /etc/localtime
|
||
readOnly: true
|
||
- name: hty1024-db-postgres-data
|
||
mountPath: /var/lib/postgres
|
||
- name: hty1024-db-postgres-pwd
|
||
mountPath: /tmp/secret-volume
|
||
readOnly: true
|
||
env:
|
||
- name: POSTGRES_PASSWORD_FILE
|
||
value: "/tmp/secret-volume/postgres.key"
|
||
nodeSelector:
|
||
node.k8s.hty1024.com/type: app
|
||
|