Skip to content

Commit 3eb9e75

Browse files
kvapskvaps
committed
add backup cronjob
1 parent 51c1bf9 commit 3eb9e75

File tree

3 files changed

+219
-0
lines changed

3 files changed

+219
-0
lines changed

‎deploy/helm/kubernetes/templates/etcd-backup-cronjob.yaml

Lines changed: 146 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,146 @@
1+
{{- if .Values.etcd.backup.enabled }}
2+
{{- $fullName := include "kubernetes.fullname" . -}}
3+
---
4+
apiVersion: batch/v1beta1
5+
kind: CronJob
6+
metadata:
7+
name: {{ $fullName }}-etcd-backup
8+
labels:
9+
app: {{ $fullName }}-etcd-backup
10+
{{- with .Values.etcd.backup.labels }}
11+
{{- toYaml . | nindent 4 }}
12+
{{- end }}
13+
{{- with .Values.etcd.backup.annotations }}
14+
annotations:
15+
{{- toYaml . | nindent 4 }}
16+
{{- end }}
17+
spec:
18+
schedule: "{{ .Values.etcd.backup.schedule }}"
19+
successfulJobsHistoryLimit: {{ .Values.etcd.backup.successfulJobsHistoryLimit }}
20+
failedJobsHistoryLimit: {{ .Values.etcd.backup.failedJobsHistoryLimit }}
21+
jobTemplate:
22+
metadata:
23+
labels:
24+
app: {{ $fullName }}-etcd-backup
25+
{{- with .Values.etcd.backup.labels }}
26+
{{- toYaml . | nindent 8 }}
27+
{{- end }}
28+
{{- with .Values.etcd.backup.annotations }}
29+
annotations:
30+
{{- toYaml . | nindent 8 }}
31+
{{- end }}
32+
spec:
33+
template:
34+
metadata:
35+
labels:
36+
app: {{ $fullName }}-etcd-backup
37+
{{- with .Values.etcd.backup.podLabels }}
38+
{{- toYaml . | nindent 12 }}
39+
{{- end }}
40+
{{- with .Values.etcd.backup.podAnnotations }}
41+
annotations:
42+
{{- toYaml . | nindent 12 }}
43+
{{- end }}
44+
spec:
45+
{{- with .Values.etcd.backup.nodeSelector }}
46+
nodeSelector:
47+
{{- toYaml . | nindent 12 }}
48+
{{- end }}
49+
{{- with .Values.etcd.backup.tolerations }}
50+
tolerations:
51+
{{- toYaml . | nindent 10 }}
52+
{{- end }}
53+
{{- if or .Values.etcd.backup.affinity .Values.etcd.backup.podAffinity }}
54+
affinity:
55+
{{- with .Values.etcd.backup.affinity }}
56+
{{- toYaml . | nindent 12 }}
57+
{{- end }}
58+
{{- if eq .Values.etcd.backup.podAffinity "hard" }}
59+
podAffinity:
60+
requiredDuringSchedulingIgnoredDuringExecution:
61+
- topologyKey: "{{ .Values.etcd.backup.podAffinityTopologyKey }}"
62+
labelSelector:
63+
matchLabels:
64+
app: {{ $fullName }}-etcd
65+
{{- else if eq .Values.etcd.backup.podAffinity "soft" }}
66+
podAffinity:
67+
preferredDuringSchedulingIgnoredDuringExecution:
68+
- weight: 1
69+
podAffinityTerm:
70+
topologyKey: "{{ .Values.etcd.backup.podAffinityTopologyKey }}"
71+
labelSelector:
72+
matchLabels:
73+
app: {{ $fullName }}-etcd
74+
{{- end }}
75+
{{- end }}
76+
77+
{{- with .Values.etcd.image.pullSecrets }}
78+
imagePullSecrets:
79+
{{- toYaml . | nindent 10 }}
80+
{{- end }}
81+
automountServiceAccountToken: false
82+
restartPolicy: OnFailure
83+
containers:
84+
- command:
85+
- /bin/sh
86+
- -xc
87+
- |
88+
rtc() { while read k s v; do test "$k" = "rtc_$1" && echo "$v" && break; done </proc/driver/rtc; }
89+
etcdctl snapshot save /data/etcd-prod-hosting-$(rtc date)-$(rtc time).db
90+
{{- range $key, $value := .Values.etcd.backup.extraArgs }} --{{ $key }}={{ $value }}{{- end }}
91+
env:
92+
- name: ETCDCTL_API
93+
value: "3"
94+
- name: ETCDCTL_CACERT
95+
value: /pki/etcd/peer/ca.crt
96+
- name: ETCDCTL_CERT
97+
value: /pki/etcd/peer/tls.crt
98+
- name: ETCDCTL_KEY
99+
value: /pki/etcd/peer/tls.key
100+
- name: ETCDCTL_ENDPOINTS
101+
value: {{ $fullName }}-etcd:{{ .Values.etcd.ports.client }}
102+
{{- with .Values.etcd.backup.extraEnv }}
103+
{{- toYaml . | nindent 12 }}
104+
{{- end }}
105+
{{- with .Values.etcd.image }}
106+
image: "{{ .repository }}{{ if .digest }}@{{ .digest }}{{ else }}:{{ .tag }}{{ end }}"
107+
imagePullPolicy: {{ .pullPolicy }}
108+
{{- end }}
109+
name: etcd-backup
110+
resources:
111+
{{- toYaml .Values.etcd.backup.resources | nindent 14 }}
112+
volumeMounts:
113+
- mountPath: /pki/etcd/ca
114+
name: pki-etcd-certs-ca
115+
- mountPath: /pki/etcd/peer
116+
name: pki-etcd-certs-peer
117+
- mountPath: /pki/etcd/server
118+
name: pki-etcd-certs-server
119+
- mountPath: /data
120+
name: data
121+
{{- with .Values.persistence.backup.subPath }}
122+
subPath: {{ . }}
123+
{{- end }}
124+
{{- with .Values.etcd.backup.extraVolumeMounts }}
125+
{{- toYaml . | nindent 12 }}
126+
{{- end }}
127+
{{- with .Values.etcd.backup.sidecars }}
128+
{{- toYaml . | nindent 10 }}
129+
{{- end }}
130+
volumes:
131+
- secret:
132+
secretName: {{ $fullName }}-pki-etcd-ca
133+
name: pki-etcd-certs-ca
134+
- secret:
135+
secretName: {{ $fullName }}-pki-etcd-peer
136+
name: pki-etcd-certs-peer
137+
- secret:
138+
secretName: {{ $fullName }}-pki-etcd-server
139+
name: pki-etcd-certs-server
140+
- name: data
141+
persistentVolumeClaim:
142+
claimName: {{ .Values.persistence.backup.existingClaim | default (printf "etcd-backup-%s-etcd" $fullName) }}
143+
{{- with .Values.etcd.backup.extraVolumes }}
144+
{{- toYaml . | nindent 10 }}
145+
{{- end }}
146+
{{- end }}

‎deploy/helm/kubernetes/templates/etcd-backup-persistentvolumeclaim.yaml

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
{{- if and .Values.etcd.backup.enabled (not .Values.persistence.backup.existingClaim) }}
2+
{{- $fullName := include "kubernetes.fullname" . -}}
3+
---
4+
kind: PersistentVolumeClaim
5+
apiVersion: v1
6+
metadata:
7+
name: etcd-backup
8+
labels:
9+
app: {{ $fullName }}-etcd
10+
{{- if .Values.persistence.backup.labels }}
11+
{{- toYaml .Values.persistence.backup.labels | nindent 4 }}
12+
{{- end }}
13+
annotations:
14+
helm.sh/resource-policy: keep
15+
{{- with .Values.persistence.backup.annotations }}
16+
{{- toYaml . | nindent 4 }}
17+
{{- end }}
18+
{{- with .Values.persistence.backup.finalizers }}
19+
finalizers:
20+
{{- toYaml . | nindent 4 }}
21+
{{- end }}
22+
spec:
23+
accessModes:
24+
{{- range .Values.persistence.backup.accessModes }}
25+
- {{ . | quote }}
26+
{{- end }}
27+
{{- if .Values.persistence.backup.storageClassName }}
28+
storageClassName: {{ .Values.persistence.backup.storageClassName }}
29+
{{- end }}
30+
resources:
31+
requests:
32+
storage: {{ .Values.persistence.backup.size | quote }}
33+
{{- end }}

‎deploy/helm/kubernetes/values.yaml

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,17 @@ persistence:
1010
finalizers:
1111
- kubernetes.io/pvc-protection
1212

13+
backup:
14+
# existingClaim: your-claim
15+
# subPath: backups
16+
accessModes:
17+
- ReadWriteOnce
18+
size: 1Gi
19+
# storageClassName: default
20+
annotations: {}
21+
finalizers:
22+
- kubernetes.io/pvc-protection
23+
1324
etcd:
1425
enabled: true
1526
image:
@@ -62,6 +73,35 @@ etcd:
6273
annotations: {}
6374
loadBalancerIP:
6475

76+
backup:
77+
enabled: false
78+
schedule: "0 */12 * * *"
79+
successfulJobsHistoryLimit: 3
80+
failedJobsHistoryLimit: 3
81+
extraArgs: #{}
82+
debug: true
83+
resources:
84+
requests:
85+
cpu: 100m
86+
memory: 128Mi
87+
# limits:
88+
# cpu: 100m
89+
# memory: 128Mi
90+
91+
labels: {}
92+
annotations: {}
93+
podLabels: {}
94+
podAnnotations: {}
95+
nodeSelector: {}
96+
tolerations: []
97+
podAffinity: soft
98+
podAffinityTopologyKey: kubernetes.io/hostname
99+
affinity: {}
100+
extraEnv: []
101+
sidecars: []
102+
extraVolumes: []
103+
extraVolumeMounts: []
104+
65105
apiServer:
66106
enabled: true
67107
image:

0 commit comments

Comments
 (0)