Skip to content

Commit 895acaf

Browse files
yuanxu4yuanxu4
authored
add port to tidb-tikv (#369)
1 parent fc2ac2a commit 895acaf

File tree

6 files changed

+81939
-0
lines changed

6 files changed

+81939
-0
lines changed

‎data/tidb-operator/tidb-tikv-port/bundle.yaml

+375
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,375 @@
1+
---
2+
# Source: tidb-operator/templates/controller-manager-rbac.yaml
3+
kind: ServiceAccount
4+
apiVersion: v1
5+
metadata:
6+
name: tidb-controller-manager
7+
namespace: acto-namespace
8+
labels:
9+
app.kubernetes.io/name: tidb-operator
10+
app.kubernetes.io/managed-by: Helm
11+
app.kubernetes.io/instance: tidb-operator
12+
app.kubernetes.io/component: controller-manager
13+
helm.sh/chart: tidb-operator-v1.5.2
14+
---
15+
# Source: tidb-operator/templates/scheduler-rbac.yaml
16+
kind: ServiceAccount
17+
apiVersion: v1
18+
metadata:
19+
name: tidb-scheduler
20+
namespace: acto-namespace
21+
labels:
22+
app.kubernetes.io/name: tidb-operator
23+
app.kubernetes.io/managed-by: Helm
24+
app.kubernetes.io/instance: tidb-operator
25+
app.kubernetes.io/component: scheduler
26+
helm.sh/chart: tidb-operator-v1.5.2
27+
---
28+
# Source: tidb-operator/templates/scheduler-config-configmap.yaml
29+
apiVersion: v1
30+
kind: ConfigMap
31+
metadata:
32+
name: tidb-scheduler-config
33+
namespace: acto-namespace
34+
labels:
35+
app.kubernetes.io/name: tidb-operator
36+
app.kubernetes.io/managed-by: Helm
37+
app.kubernetes.io/instance: tidb-operator
38+
app.kubernetes.io/component: scheduler
39+
helm.sh/chart: tidb-operator-v1.5.2
40+
data:
41+
scheduler-config.yaml: |-
42+
43+
apiVersion: kubescheduler.config.k8s.io/v1
44+
kind: KubeSchedulerConfiguration
45+
leaderElection:
46+
leaderElect: true
47+
resourceNamespace: acto-namespace
48+
resourceName: tidb-scheduler
49+
profiles:
50+
- schedulerName: tidb-scheduler
51+
extenders:
52+
- urlPrefix: http://127.0.0.1:10262/scheduler
53+
filterVerb: filter
54+
preemptVerb: preempt
55+
weight: 1
56+
enableHTTPS: false
57+
httpTimeout: 30s
58+
---
59+
# Source: tidb-operator/templates/controller-manager-rbac.yaml
60+
kind: ClusterRole
61+
apiVersion: rbac.authorization.k8s.io/v1
62+
metadata:
63+
name: tidb-operator:tidb-controller-manager
64+
labels:
65+
app.kubernetes.io/name: tidb-operator
66+
app.kubernetes.io/managed-by: Helm
67+
app.kubernetes.io/instance: tidb-operator
68+
app.kubernetes.io/component: controller-manager
69+
helm.sh/chart: tidb-operator-v1.5.2
70+
rules:
71+
- apiGroups: [""]
72+
resources:
73+
- services
74+
- events
75+
verbs: ["*"]
76+
- apiGroups: [""]
77+
resources: ["endpoints","configmaps"]
78+
verbs: ["create", "get", "list", "watch", "update","delete"]
79+
- apiGroups: [""]
80+
resources: ["serviceaccounts"]
81+
verbs: ["create","get","update","delete"]
82+
- apiGroups: ["batch"]
83+
resources: ["jobs"]
84+
verbs: ["get", "list", "watch", "create", "update", "delete"]
85+
- apiGroups: [""]
86+
resources: ["secrets"]
87+
verbs: ["create", "update", "get", "list", "watch","delete"]
88+
- apiGroups: [""]
89+
resources: ["persistentvolumeclaims"]
90+
verbs: ["get", "list", "watch", "create", "update", "delete", "patch"]
91+
- apiGroups: [""]
92+
resources: ["pods"]
93+
verbs: ["get", "list", "watch","update", "delete"]
94+
- apiGroups: ["apps"]
95+
resources: ["statefulsets","deployments", "controllerrevisions"]
96+
verbs: ["*"]
97+
- apiGroups: ["extensions"]
98+
resources: ["ingresses"]
99+
verbs: ["*"]
100+
- apiGroups: ["networking.k8s.io"]
101+
resources: ["ingresses"]
102+
verbs: ["*"]
103+
- apiGroups: ["apps.pingcap.com"]
104+
resources: ["statefulsets", "statefulsets/status"]
105+
verbs: ["*"]
106+
- apiGroups: ["pingcap.com"]
107+
resources: ["*"]
108+
verbs: ["*"]
109+
- nonResourceURLs: ["/metrics"]
110+
verbs: ["get"]
111+
- apiGroups: [""]
112+
resources: ["nodes"]
113+
verbs: ["get", "list", "watch"]
114+
- apiGroups: [""]
115+
resources: ["persistentvolumes"]
116+
verbs: ["get", "list", "watch", "patch", "update", "create"]
117+
- apiGroups: ["storage.k8s.io"]
118+
resources: ["storageclasses"]
119+
verbs: ["get", "list", "watch"]
120+
121+
- apiGroups: ["rbac.authorization.k8s.io"]
122+
resources: [clusterroles,roles]
123+
verbs: ["escalate","create","get","update", "delete"]
124+
- apiGroups: ["rbac.authorization.k8s.io"]
125+
resources: ["rolebindings","clusterrolebindings"]
126+
verbs: ["create","get","update", "delete"]
127+
---
128+
# Source: tidb-operator/templates/scheduler-rbac.yaml
129+
kind: ClusterRole
130+
apiVersion: rbac.authorization.k8s.io/v1
131+
metadata:
132+
name: tidb-operator:tidb-scheduler
133+
labels:
134+
app.kubernetes.io/name: tidb-operator
135+
app.kubernetes.io/managed-by: Helm
136+
app.kubernetes.io/instance: tidb-operator
137+
app.kubernetes.io/component: scheduler
138+
helm.sh/chart: tidb-operator-v1.5.2
139+
rules:
140+
# ConfigMap permission for --policy-configmap
141+
- apiGroups: [""]
142+
resources: ["configmaps"]
143+
verbs: ["get", "list", "watch"]
144+
- apiGroups: [""]
145+
resources: ["pods"]
146+
verbs: ["get", "list", "watch"]
147+
- apiGroups: [""]
148+
resources: ["nodes"]
149+
verbs: ["get", "list"]
150+
- apiGroups: ["pingcap.com"]
151+
resources: ["tidbclusters"]
152+
verbs: ["get"]
153+
- apiGroups: [""]
154+
resources: ["persistentvolumeclaims"]
155+
verbs: ["get", "list", "update"]
156+
# Extra permissions for endpoints other than kube-scheduler
157+
- apiGroups: [""]
158+
resources: ["endpoints"]
159+
verbs: ["delete", "get", "patch", "update"]
160+
- apiGroups: ["coordination.k8s.io"]
161+
resources: ["leases"]
162+
verbs: ["create"]
163+
- apiGroups: ["coordination.k8s.io"]
164+
resources: ["leases"]
165+
resourceNames: ["tidb-scheduler"]
166+
verbs: ["get", "update"]
167+
---
168+
# Source: tidb-operator/templates/controller-manager-rbac.yaml
169+
kind: ClusterRoleBinding
170+
apiVersion: rbac.authorization.k8s.io/v1
171+
metadata:
172+
name: tidb-operator:tidb-controller-manager
173+
labels:
174+
app.kubernetes.io/name: tidb-operator
175+
app.kubernetes.io/managed-by: Helm
176+
app.kubernetes.io/instance: tidb-operator
177+
app.kubernetes.io/component: controller-manager
178+
helm.sh/chart: tidb-operator-v1.5.2
179+
subjects:
180+
- kind: ServiceAccount
181+
name: tidb-controller-manager
182+
namespace: acto-namespace
183+
roleRef:
184+
kind: ClusterRole
185+
name: tidb-operator:tidb-controller-manager
186+
apiGroup: rbac.authorization.k8s.io
187+
---
188+
# Source: tidb-operator/templates/scheduler-rbac.yaml
189+
kind: ClusterRoleBinding
190+
apiVersion: rbac.authorization.k8s.io/v1
191+
metadata:
192+
name: tidb-operator:tidb-scheduler
193+
labels:
194+
app.kubernetes.io/name: tidb-operator
195+
app.kubernetes.io/managed-by: Helm
196+
app.kubernetes.io/instance: tidb-operator
197+
app.kubernetes.io/component: scheduler
198+
helm.sh/chart: tidb-operator-v1.5.2
199+
subjects:
200+
- kind: ServiceAccount
201+
name: tidb-scheduler
202+
namespace: acto-namespace
203+
roleRef:
204+
kind: ClusterRole
205+
name: tidb-operator:tidb-scheduler
206+
apiGroup: rbac.authorization.k8s.io
207+
---
208+
# Source: tidb-operator/templates/scheduler-rbac.yaml
209+
kind: ClusterRoleBinding
210+
apiVersion: rbac.authorization.k8s.io/v1
211+
metadata:
212+
name: tidb-operator:kube-scheduler
213+
labels:
214+
app.kubernetes.io/name: tidb-operator
215+
app.kubernetes.io/managed-by: Helm
216+
app.kubernetes.io/instance: tidb-operator
217+
app.kubernetes.io/component: scheduler
218+
helm.sh/chart: tidb-operator-v1.5.2
219+
subjects:
220+
- kind: ServiceAccount
221+
name: tidb-scheduler
222+
namespace: acto-namespace
223+
roleRef:
224+
kind: ClusterRole
225+
name: system:kube-scheduler
226+
apiGroup: rbac.authorization.k8s.io
227+
---
228+
# Source: tidb-operator/templates/scheduler-rbac.yaml
229+
kind: ClusterRoleBinding
230+
apiVersion: rbac.authorization.k8s.io/v1
231+
metadata:
232+
name: tidb-operator:volume-scheduler
233+
labels:
234+
app.kubernetes.io/name: tidb-operator
235+
app.kubernetes.io/managed-by: Helm
236+
app.kubernetes.io/instance: tidb-operator
237+
app.kubernetes.io/component: scheduler
238+
helm.sh/chart: tidb-operator-v1.5.2
239+
subjects:
240+
- kind: ServiceAccount
241+
name: tidb-scheduler
242+
namespace: acto-namespace
243+
roleRef:
244+
kind: ClusterRole
245+
name: system:volume-scheduler
246+
apiGroup: rbac.authorization.k8s.io
247+
---
248+
# Source: tidb-operator/templates/controller-manager-deployment.yaml
249+
apiVersion: apps/v1
250+
kind: Deployment
251+
metadata:
252+
name: tidb-controller-manager
253+
namespace: acto-namespace
254+
labels:
255+
app.kubernetes.io/name: tidb-operator
256+
app.kubernetes.io/managed-by: Helm
257+
app.kubernetes.io/instance: tidb-operator
258+
app.kubernetes.io/component: controller-manager
259+
helm.sh/chart: tidb-operator-v1.5.2
260+
spec:
261+
replicas: 1
262+
selector:
263+
matchLabels:
264+
app.kubernetes.io/name: tidb-operator
265+
app.kubernetes.io/instance: tidb-operator
266+
app.kubernetes.io/component: controller-manager
267+
template:
268+
metadata:
269+
labels:
270+
app.kubernetes.io/name: tidb-operator
271+
app.kubernetes.io/instance: tidb-operator
272+
app.kubernetes.io/component: controller-manager
273+
spec:
274+
serviceAccount: tidb-controller-manager
275+
containers:
276+
- name: tidb-operator
277+
image: pingcap/tidb-operator:v1.5.2
278+
imagePullPolicy: IfNotPresent
279+
resources:
280+
requests:
281+
cpu: 80m
282+
memory: 50Mi
283+
livenessProbe:
284+
tcpSocket:
285+
port: 6060
286+
initialDelaySeconds: 30
287+
periodSeconds: 10
288+
failureThreshold: 10
289+
command:
290+
- /usr/local/bin/tidb-controller-manager
291+
- -tidb-backup-manager-image=pingcap/tidb-backup-manager:v1.5.2
292+
- -tidb-discovery-image=pingcap/tidb-operator:v1.5.2
293+
- -cluster-scoped=true
294+
- -cluster-permission-node=true
295+
- -cluster-permission-pv=true
296+
- -cluster-permission-sc=true
297+
- -auto-failover=true
298+
- -pd-failover-period=5m
299+
- -tikv-failover-period=5m
300+
- -tiflash-failover-period=5m
301+
- -tidb-failover-period=5m
302+
- -dm-master-failover-period=5m
303+
- -dm-worker-failover-period=5m
304+
- -v=2
305+
env:
306+
- name: NAMESPACE
307+
valueFrom:
308+
fieldRef:
309+
fieldPath: metadata.namespace
310+
- name: TZ
311+
value: UTC
312+
---
313+
# Source: tidb-operator/templates/scheduler-deployment.yaml
314+
apiVersion: apps/v1
315+
kind: Deployment
316+
metadata:
317+
name: tidb-scheduler
318+
namespace: acto-namespace
319+
labels:
320+
app.kubernetes.io/name: tidb-operator
321+
app.kubernetes.io/managed-by: Helm
322+
app.kubernetes.io/instance: tidb-operator
323+
app.kubernetes.io/component: scheduler
324+
helm.sh/chart: tidb-operator-v1.5.2
325+
spec:
326+
replicas: 1
327+
selector:
328+
matchLabels:
329+
app.kubernetes.io/name: tidb-operator
330+
app.kubernetes.io/instance: tidb-operator
331+
app.kubernetes.io/component: scheduler
332+
template:
333+
metadata:
334+
labels:
335+
app.kubernetes.io/name: tidb-operator
336+
app.kubernetes.io/instance: tidb-operator
337+
app.kubernetes.io/component: scheduler
338+
spec:
339+
serviceAccount: tidb-scheduler
340+
containers:
341+
- name: tidb-scheduler
342+
image: pingcap/tidb-operator:v1.5.2
343+
imagePullPolicy: IfNotPresent
344+
resources:
345+
limits:
346+
cpu: 250m
347+
memory: 150Mi
348+
requests:
349+
cpu: 80m
350+
memory: 50Mi
351+
command:
352+
- /usr/local/bin/tidb-scheduler
353+
- -v=2
354+
- -port=10262
355+
- name: kube-scheduler
356+
image: registry.k8s.io/kube-scheduler:v1.29.0
357+
imagePullPolicy: IfNotPresent
358+
resources:
359+
limits:
360+
cpu: 250m
361+
memory: 150Mi
362+
requests:
363+
cpu: 80m
364+
memory: 50Mi
365+
command:
366+
- kube-scheduler
367+
- --v=2
368+
- --config=/etc/kubernetes/scheduler-config.yaml
369+
volumeMounts:
370+
- name: scheduler-config
371+
mountPath: /etc/kubernetes
372+
volumes:
373+
- name: scheduler-config
374+
configMap:
375+
name: tidb-scheduler-config

0 commit comments

Comments
 (0)