wangbo
7c142f5960
阿里云 OSS 的 S3 兼容层要求 virtual-hosted addressing，且 boto3 需要使用 Signature V2。本提交为 Barman 的归档、备份、保留与恢复统一挂载 AWS 配置，并将实际 WAL 归档和近期全备设为切换硬门禁。 同时补充 CNPG/etcdutl 固定版本安装、显式主库切换、三节点逐台停机、OSS 快照下载校验与远端临时 Secret 清理。已通过 ShellCheck、Kustomize、服务端 dry-run、迁移测试、发布脚本测试、敏感信息扫描及生产 precutover 验收。
146 lines
3.6 KiB
YAML
146 lines
3.6 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: easyai-barman-aws-config
|
|
labels:
|
|
app.kubernetes.io/part-of: easyai-ai-gateway
|
|
data:
|
|
config: |
|
|
[default]
|
|
region = oss-cn-shanghai
|
|
s3 =
|
|
addressing_style = virtual
|
|
signature_version = s3
|
|
---
|
|
apiVersion: barmancloud.cnpg.io/v1
|
|
kind: ObjectStore
|
|
metadata:
|
|
name: easyai-postgres-oss
|
|
labels:
|
|
app.kubernetes.io/part-of: easyai-ai-gateway
|
|
spec:
|
|
retentionPolicy: 14d
|
|
configuration:
|
|
destinationPath: s3://wangbo0808/easyai-ai-gateway/production/postgresql
|
|
endpointURL: https://s3.oss-cn-shanghai.aliyuncs.com
|
|
s3Credentials:
|
|
accessKeyId:
|
|
name: easyai-oss-backup
|
|
key: ACCESS_KEY_ID
|
|
secretAccessKey:
|
|
name: easyai-oss-backup
|
|
key: ACCESS_SECRET_KEY
|
|
wal:
|
|
archiveAdditionalCommandArgs:
|
|
- --addressing-style=virtual
|
|
compression: gzip
|
|
maxParallel: 2
|
|
restoreAdditionalCommandArgs:
|
|
- --addressing-style=virtual
|
|
data:
|
|
additionalCommandArgs:
|
|
- --addressing-style=virtual
|
|
compression: gzip
|
|
jobs: 2
|
|
restoreAdditionalCommandArgs:
|
|
- --addressing-style=virtual
|
|
instanceSidecarConfiguration:
|
|
env:
|
|
- name: AWS_CONFIG_FILE
|
|
value: /projected/barman-aws/config
|
|
- name: AWS_DEFAULT_REGION
|
|
value: oss-cn-shanghai
|
|
- name: AWS_REQUEST_CHECKSUM_CALCULATION
|
|
value: when_required
|
|
- name: AWS_RESPONSE_CHECKSUM_VALIDATION
|
|
value: when_required
|
|
---
|
|
apiVersion: postgresql.cnpg.io/v1
|
|
kind: Cluster
|
|
metadata:
|
|
name: easyai-postgres
|
|
labels:
|
|
app.kubernetes.io/name: easyai-postgres
|
|
app.kubernetes.io/part-of: easyai-ai-gateway
|
|
spec:
|
|
instances: 2
|
|
imageName: ghcr.io/cloudnative-pg/postgresql:18.4-standard-trixie@sha256:4587df73024408f5b2be9b4dd6ba2ccee8c9e5dc0c9a87c274c292291cc8a68c
|
|
imagePullPolicy: IfNotPresent
|
|
primaryUpdateStrategy: unsupervised
|
|
primaryUpdateMethod: switchover
|
|
failoverDelay: 0
|
|
switchoverDelay: 60
|
|
stopDelay: 90
|
|
smartShutdownTimeout: 30
|
|
bootstrap:
|
|
initdb:
|
|
database: easyai_ai_gateway
|
|
owner: easyai
|
|
secret:
|
|
name: easyai-postgres-app
|
|
postInitSQL:
|
|
- CREATE EXTENSION IF NOT EXISTS pgcrypto;
|
|
storage:
|
|
storageClass: local-path
|
|
size: 20Gi
|
|
walStorage:
|
|
storageClass: local-path
|
|
size: 5Gi
|
|
affinity:
|
|
enablePodAntiAffinity: true
|
|
podAntiAffinityType: required
|
|
topologyKey: easyai.io/site
|
|
nodeSelector:
|
|
easyai.io/database: "true"
|
|
resources:
|
|
requests:
|
|
cpu: 500m
|
|
memory: 1Gi
|
|
limits:
|
|
cpu: "2"
|
|
memory: 3Gi
|
|
postgresql:
|
|
synchronous:
|
|
method: any
|
|
number: 1
|
|
dataDurability: preferred
|
|
parameters:
|
|
archive_timeout: 60s
|
|
max_connections: "200"
|
|
shared_buffers: 512MB
|
|
wal_compression: "on"
|
|
wal_keep_size: 1GB
|
|
monitoring:
|
|
enablePodMonitor: false
|
|
projectedVolumeTemplate:
|
|
defaultMode: 0444
|
|
sources:
|
|
- configMap:
|
|
name: easyai-barman-aws-config
|
|
items:
|
|
- key: config
|
|
path: barman-aws/config
|
|
plugins:
|
|
- name: barman-cloud.cloudnative-pg.io
|
|
isWALArchiver: true
|
|
parameters:
|
|
barmanObjectName: easyai-postgres-oss
|
|
---
|
|
apiVersion: postgresql.cnpg.io/v1
|
|
kind: ScheduledBackup
|
|
metadata:
|
|
name: easyai-postgres-daily
|
|
labels:
|
|
app.kubernetes.io/part-of: easyai-ai-gateway
|
|
spec:
|
|
# Six-field cron, UTC: 18:30 UTC is 02:30 Asia/Shanghai.
|
|
schedule: "0 30 18 * * *"
|
|
backupOwnerReference: self
|
|
cluster:
|
|
name: easyai-postgres
|
|
method: plugin
|
|
pluginConfiguration:
|
|
name: barman-cloud.cloudnative-pg.io
|
|
immediate: false
|
|
suspend: false
|