Socket
Socket
Sign inDemoInstall

@helm-charts/appscode-kubedb

Package Overview
Dependencies
1
Maintainers
2
Versions
13
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    @helm-charts/appscode-kubedb

KubeDB by AppsCode - Production ready databases on Kubernetes


Version published
Maintainers
2
Created

Readme

Source

@helm-charts/appscode-kubedb

KubeDB by AppsCode - Production ready databases on Kubernetes

FieldValue
Repository Nameappscode
Chart Namekubedb
Chart Version0.9.0-rc.2
NPM Package Version0.1.0
Helm chart `values.yaml` (default values)
##
## KubeDB chart configuration
##
# Declare variables to be passed into your templates.
replicaCount: 1
# Docker registry containing Kubedb images
kubedb:
  registry: kubedb
  repository: operator
  tag: 0.9.0-rc.2
cleaner:
  registry: appscode
  repository: kubectl
  tag: v1.11
## Optionally specify an array of imagePullSecrets.
## Secrets must be manually created in the namespace.
## ref: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod
##
# imagePullSecrets:
#   - name: myRegistryKeySecretName
## Specify a imagePullPolicy
## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
##
imagePullPolicy: IfNotPresent
## Installs KubeDB operator as critical addon
## https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/
criticalAddon: false

## Log level for operator
logLevel: 3

## Annotations passed to operator pod(s).
##
annotations: {}

## Node labels for pod assignment
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector:
  beta.kubernetes.io/os: linux
  beta.kubernetes.io/arch: amd64

## Tolerations for pod assignment
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations: {}

## Affinity for pod assignment
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
##
affinity: {}

rbac:
  # Specifies whether RBAC resources should be created
  create: true

serviceAccount:
  # Specifies whether a ServiceAccount should be created
  create: true
  # The name of the ServiceAccount to use.
  # If not set and create is true, a name is generated using the fullname template
  name:

apiserver:
  # groupPriorityMinimum is the minimum priority the group should have. Please see
  # https://github.com/kubernetes/kube-aggregator/blob/release-1.9/pkg/apis/apiregistration/v1beta1/types.go#L58-L64
  # for more information on proper values of this field.
  groupPriorityMinimum: 10000
  # versionPriority is the ordering of this API inside of the group. Please see
  # https://github.com/kubernetes/kube-aggregator/blob/release-1.9/pkg/apis/apiregistration/v1beta1/types.go#L66-L70
  # for more information on proper values of this field
  versionPriority: 15
  # enableMutatingWebhook is used to configure mutating webhook for KubeDB CRDs
  enableMutatingWebhook: true
  # enableValidatingWebhook is used to configure validating webhook for KubeDB CRDs
  enableValidatingWebhook: true
  # CA certificate used by main Kubernetes api server
  ca: not-ca-cert
  # If true, disables status sub resource for crds.
  # Otherwise, enables status sub resource for Kubernetes version >= 1.11 and disables for other versions.
  disableStatusSubresource: false
  # If true, bypasses validating webhook xray checks
  bypassValidatingWebhookXray: false
  # If true, uses kube-apiserver FQDN for AKS cluster to workaround https://github.com/Azure/AKS/issues/522 (default true)
  useKubeapiserverFqdnForAks: true

# Send usage events to Google Analytics
enableAnalytics: true

KubeDB

KubeDB by AppsCode - Making running production-grade databases easy on Kubernetes

TL;DR;

$ helm repo add appscode https://charts.appscode.com/stable/
$ helm repo update
$ helm install appscode/kubedb

Introduction

This chart bootstraps a KubeDB controller deployment on a Kubernetes cluster using the Helm package manager.

Prerequisites

  • Kubernetes 1.9+

Installing the Chart

To install the chart with the release name my-release:

$ helm install appscode/kubedb --name my-release

The command deploys KubeDB operator on the Kubernetes cluster in the default configuration. The configuration section lists the parameters that can be configured during installation.

Tip: List all releases using helm list

Uninstalling the Chart

To uninstall/delete the my-release:

$ helm delete my-release

The command removes all the Kubernetes components associated with the chart and deletes the release.

Configuration

The following table lists the configurable parameters of the KubeDB chart and their default values.

ParameterDescriptionDefault
replicaCountNumber of kubedb operator replicas to create (only 1 is supported)1
kubedb.registryDocker registry used to pull Kubedb operator imagekubedb
kubedb.repositoryKubedb operator container imageoperator
kubedb.tagKubedb operator container image tag0.9.0-rc.2
cleaner.registryDocker registry used to pull Webhook cleaner imageappscode
cleaner.repositoryWebhook cleaner container imagekubectl
cleaner.tagWebhook cleaner container image tagv1.11
imagePullSecretsSpecify image pull secretsnil (does not add image pull secrets to deployed pods)
imagePullPolicyImage pull policyIfNotPresent
criticalAddonIf true, installs KubeDB operator as critical addonfalse
logLevelLog level for operator3
affinityAffinity rules for pod assignment{}
annotationsAnnotations applied to operator pod(s){}
nodeSelectorNode labels for pod assignment{}
tolerationsTolerations used pod assignment{}
rbac.createIf true, create and use RBAC resourcestrue
serviceAccount.createIf true, create a new service accounttrue
serviceAccount.nameService account to be used. If not set and serviceAccount.create is true, a name is generated using the fullname template``
apiserver.groupPriorityMinimumThe minimum priority the group should have.10000
apiserver.versionPriorityThe ordering of this API inside of the group.15
apiserver.enableValidatingWebhookEnable validating webhooks for KubeDB CRDstrue
apiserver.enableMutatingWebhookEnable mutating webhooks for KubeDB CRDstrue
apiserver.caCA certificate used by main Kubernetes api servernot-ca-cert
apiserver.disableStatusSubresourceIf true, disables status sub resource for crds. Otherwise enables based on Kubernetes versionfalse
apiserver.bypassValidatingWebhookXrayIf true, bypasses validating webhook xray checksfalse
apiserver.useKubeapiserverFqdnForAksIf true, uses kube-apiserver FQDN for AKS cluster to workaround https://github.com/Azure/AKS/issues/522true
enableAnalyticsSend usage events to Google Analyticstrue

Specify each parameter using the --set key=value[,key=value] argument to helm install. For example:

$ helm install --name my-release --set image.tag=v0.2.1 appscode/kubedb

Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example:

$ helm install --name my-release --values values.yaml appscode/kubedb

RBAC

By default the chart will not install the recommended RBAC roles and rolebindings.

You need to have the flag --authorization-mode=RBAC on the api server. See the following document for how to enable RBAC.

To determine if your cluster supports RBAC, run the following command:

$ kubectl api-versions | grep rbac

If the output contains "beta", you may install the chart with RBAC enabled (see below).

Enable RBAC role/rolebinding creation

To enable the creation of RBAC resources (On clusters with RBAC). Do the following:

$ helm install --name my-release appscode/kubedb --set rbac.create=true

FAQs

Last updated on 22 Apr 2019

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc