Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CNPG DBConfig #2

Open
wants to merge 125 commits into
base: DB-update-2024-05-22
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
125 commits
Select commit Hold shift + click to select a range
2f22061
Add hermes section to server to prevent ActiveMQ message queuing in m…
Thysk May 13, 2024
44df417
Add hermes section with used services_list into server values
Thysk May 13, 2024
7205ee6
Add opensearch values and make files to be incorperated into Rubin Ru…
Thysk May 13, 2024
ebc0a7f
Add opensearch to kustomization and makefiles
Thysk May 20, 2024
703e04a
add opensearch version to makefile
Thysk May 20, 2024
36ee360
add opensearch repo to helm command
Thysk May 20, 2024
9a5f770
uncomment ns.yaml in kustomization
Thysk May 20, 2024
5f67052
Fix opensearch directory depth, and repo typo in top level prod kusto…
Thysk May 22, 2024
527d054
typo and added opensearch to apply
Thysk May 22, 2024
5fa43ce
Merge branch 'slaclab:main' into add-opensearch
Thysk May 22, 2024
aed8d81
Merge branch 'slaclab:main' into main
Thysk May 22, 2024
18c3d8e
Merge branch 'slaclab:main' into Prevent-activeMQ-messages
Thysk May 22, 2024
70258b5
remove emptyDir from podSecurityPolicy.volumes
Thysk May 22, 2024
c6a4414
remove secret that was unused in my deployment
Thysk May 22, 2024
2be5da3
reduce VmMaxMap count to match cluster
Thysk May 23, 2024
6a2cdfb
updated to use opensearch version 2.14
Thysk May 23, 2024
c7a6644
Reenable HermesK and Kafka support. Needs both to work.
bjwhite-fnal May 23, 2024
c5ecf18
Merge pull request #27 from bjwhite-fnal/main
bjwhite-fnal May 23, 2024
80c2f73
Make patchfile naming consistent because I keep grepping for the wron…
bjwhite-fnal May 23, 2024
b369804
Merge pull request #28 from bjwhite-fnal/main
bjwhite-fnal May 23, 2024
a215d20
Merge pull request #24 from Thysk/Prevent-activeMQ-messages
bjwhite-fnal May 24, 2024
cd458fe
enable sysctlInit to set sysctl settings using init container, and re…
Thysk May 29, 2024
bce1d8e
add sysctlInit and resetMaxMapCount to default
Thysk May 29, 2024
aa4418e
Merge branch 'main' of https://github.com/Thysk/rubin-rucio-deploy in…
Thysk May 29, 2024
3e9b17a
change elastic_endpoint to opensearch cluster, add use_ssl to false f…
Thysk May 29, 2024
dd5084c
change the RUCIO_CFG_HERMES_ELASTIC_USERNAME to match the opensearch …
Thysk May 29, 2024
709104f
make change to server elastic_endpoint as well
Thysk May 30, 2024
85be30a
Testing most recent version of HermesK
bjwhite-fnal May 30, 2024
3122984
Add env var to turn on HermesK.
bjwhite-fnal May 30, 2024
983b8f9
Merge pull request #25 from Thysk/add-opensearch
bjwhite-fnal Jun 5, 2024
50372e1
Add hermes section to server to prevent ActiveMQ message queuing in m…
Thysk May 13, 2024
8e66c9d
Merge branch 'main' of https://github.com/Thysk/rubin-rucio-deploy in…
Thysk Jun 6, 2024
564b231
Merge branch 'slaclab:main' into main
Thysk Jun 6, 2024
2369f30
Increase persistant volume request from 30 to 300GB as requested by Wei
Thysk Jun 6, 2024
1f9f0e8
Merge pull request #33 from yuyiguo/DB-update-2024-05-22
bjwhite-fnal Jun 6, 2024
e6e9cee
Merge pull request #30 from Thysk/main
bjwhite-fnal Jun 6, 2024
a84a554
Merge pull request #29 from Thysk/Hermes-output-from-ElasticSearch-to…
bjwhite-fnal Jun 6, 2024
43f6191
some input format changed and some commented out for testing.
yuyiguo Jun 7, 2024
6c3454a
Give the hermesk daemon the proxy it was looking for.
bjwhite-fnal Jun 12, 2024
185b626
Use the bootstrap ip.
bjwhite-fnal Jun 12, 2024
5128a1e
Syntax fix.
bjwhite-fnal Jun 17, 2024
4036817
Mount ca-cert volume to Hermes.
bjwhite-fnal Jun 17, 2024
90f2c39
Disable HermesK for production.
bjwhite-fnal Jun 17, 2024
eae897e
Enable ca cert mount for Automatix in production.
bjwhite-fnal Jun 17, 2024
808d162
add SLAC_BUTLER_DISK & SLAC_BUTLER_DEV_DISK to hermes hermes topic list
s-sajid-ali Jun 20, 2024
a5da5d0
update postgreSQL DB to 14.12-5 from 14.4-7
yuyiguo Jun 21, 2024
26c6fe9
Merge pull request #35 from yuyiguo/2024-06-18-dev-DBConfg
bjwhite-fnal Jun 24, 2024
d372b01
Merge pull request #34 from s-sajid-ali/add_rses_to_hermes
bjwhite-fnal Jun 24, 2024
dba46e4
Updates to HermesK and Kafka stuff.
bjwhite-fnal Jul 9, 2024
cba95db
Update server to send Kafka messages.
bjwhite-fnal Jul 24, 2024
b1da0f0
Reconciliate with upstream.
bjwhite-fnal Jul 24, 2024
442e9cd
Merge pull request #37 from bjwhite-fnal/main
bjwhite-fnal Jul 24, 2024
c1ff810
updated/added FTS groupBulk to 50 (the default rucio bulk is 100).
yuyiguo Jul 29, 2024
88e9391
Add HermesK configuration to production. Ready for production workflo…
bjwhite-fnal Jul 30, 2024
eb8e0ee
Merge pull request #39 from bjwhite-fnal/main
bjwhite-fnal Jul 30, 2024
b4fc25a
Merge pull request #38 from yuyiguo/update-groupBulk-20240729
bjwhite-fnal Jul 30, 2024
350363f
Remove Open/Elasticsearch. Opensearch is going to its own vCluster in…
bjwhite-fnal Jul 30, 2024
69955c4
Merge remote-tracking branch 'upstream/main'
bjwhite-fnal Jul 30, 2024
d569b49
Merge pull request #40 from bjwhite-fnal/main
bjwhite-fnal Jul 30, 2024
52a0860
Remove open/elasticsearch stuff from top level Makefile.
bjwhite-fnal Aug 6, 2024
c1f6b6f
Add SLAC_BUTLER_DISK for production.
bjwhite-fnal Aug 6, 2024
3a63163
Merge pull request #41 from bjwhite-fnal/main
bjwhite-fnal Aug 6, 2024
8474406
Update HermesK topic_list to values specified in DM-46355
bjwhite-fnal Sep 17, 2024
b1b291a
Merge remote-tracking branch 'upstream/main'
bjwhite-fnal Sep 17, 2024
d1cdb26
Merge pull request #42 from bjwhite-fnal/main
bjwhite-fnal Sep 17, 2024
54e9389
Re enable elasitic service and change endpoint to new OS and indexes …
Sep 18, 2024
28f2cdb
correct secrets for hermes
Sep 18, 2024
fe7d735
Update deployed Kafka topics to match HermesK config in DM-46355.
bjwhite-fnal Sep 18, 2024
1de0a29
Merge pull request #44 from bjwhite-fnal/main
bjwhite-fnal Sep 18, 2024
091df3a
Merge pull request #43 from Thysk/Enable-OS-and-point-to-index
bjwhite-fnal Sep 25, 2024
bd7f464
add logstash for dev and prod environments
Sep 30, 2024
04afee5
Merge pull request #45 from Thysk/add-logstash-for-monitoring
bjwhite-fnal Oct 2, 2024
c74f052
Upgrade dev deployment to 35.4.0.
bjwhite-fnal Oct 7, 2024
4601c37
Upgrade prod to 35.4.0.
bjwhite-fnal Oct 7, 2024
cbf62dc
Merge pull request #46 from bjwhite-fnal/main
bjwhite-fnal Oct 7, 2024
caf32d0
Increase Hermes chunk size.
bjwhite-fnal Oct 8, 2024
9437515
Merge pull request #47 from bjwhite-fnal/main
bjwhite-fnal Oct 8, 2024
90e340e
Update Hermes bulk further.
bjwhite-fnal Oct 8, 2024
5eb51f5
Merge pull request #48 from bjwhite-fnal/main
bjwhite-fnal Oct 8, 2024
e599693
Adjust kafka Topic config. Increase PVCs to 5G for Kafka.
bjwhite-fnal Oct 9, 2024
0028120
Merge pull request #49 from bjwhite-fnal/main
bjwhite-fnal Oct 9, 2024
32c30fb
Fix typo in automatix config.
bjwhite-fnal Oct 14, 2024
dc5c894
Merge pull request #50 from bjwhite-fnal/main
bjwhite-fnal Oct 14, 2024
70bb175
Move prod logstash directory to match dev.
bjwhite-fnal Oct 23, 2024
f5e6e2f
Remove unused Elasticsearch deployment. Exists in its own vCluster now.
bjwhite-fnal Oct 23, 2024
25f10bc
Merge pull request #51 from bjwhite-fnal/main
bjwhite-fnal Oct 23, 2024
07e3daf
connect dve db to pg16 DB and disabled pg14.
yuyiguo Nov 13, 2024
58ba251
Merge pull request #53 from yuyiguo/pg16dev
bjwhite-fnal Nov 14, 2024
27eb3be
Remove cruft.
bjwhite-fnal Oct 23, 2024
3a6eb59
Remove Elastic stuff from dev makefile.
bjwhite-fnal Oct 29, 2024
5a0c831
Remove elastic stuff from dev.
bjwhite-fnal Nov 14, 2024
b367723
Sync up.
bjwhite-fnal Nov 14, 2024
e98b4d0
Merge pull request #54 from bjwhite-fnal/main
bjwhite-fnal Nov 14, 2024
49212a2
Fix postgres/kustomization.yaml namespace.
bjwhite-fnal Nov 15, 2024
59cc3b8
Merge pull request #55 from bjwhite-fnal/main
bjwhite-fnal Nov 15, 2024
082e149
Update DB cluster/pooler to have 16 in name, so we don't start a seco…
bjwhite-fnal Nov 15, 2024
bbb7b81
Merge pull request #56 from bjwhite-fnal/main
bjwhite-fnal Nov 15, 2024
ec61036
Fix the CNPG DB container image.
bjwhite-fnal Nov 15, 2024
7a3a496
Merge pull request #57 from bjwhite-fnal/main
bjwhite-fnal Nov 15, 2024
cfeed63
Increase production Postgres replicas to 3.
bjwhite-fnal Nov 18, 2024
f1e3011
Upgrade dev to 35.6.0
bjwhite-fnal Nov 19, 2024
45a865a
Upgrade prod to 35.6.0
bjwhite-fnal Nov 19, 2024
49a571c
Update prod Kafka bootstrap URL for HermesK.
bjwhite-fnal Nov 20, 2024
5181a0e
Increase KafkaTopic retention period to 6 hours.
bjwhite-fnal Nov 20, 2024
915a1dd
Update HermesK to 35.6.0.1
bjwhite-fnal Nov 21, 2024
00ba427
Pin production Kafka bootstrap IP.
bjwhite-fnal Nov 21, 2024
9c79142
We will only running automatix against the *_DATA_DISK in all the fou…
yuyiguo Dec 2, 2024
e82d221
Increase Postgres memory for production.
bjwhite-fnal Dec 3, 2024
34a3bb6
Upgrade helm charts for dev server/daemons.
bjwhite-fnal Dec 9, 2024
a7f7b86
Upgrade helm charts for prod server/daemons.
bjwhite-fnal Dec 9, 2024
068bc3d
Turn on WebUI for dev.
bjwhite-fnal Dec 16, 2024
ca94768
Update for use of usdf-fts3-dev.
bjwhite-fnal Dec 17, 2024
3ae5c96
Switch DEV to using fetch-crl-cron for initContainer CA certificate i…
bjwhite-fnal Dec 30, 2024
659b175
Switch PROD to using fetch-crl-cron for initContainer CA certificate …
bjwhite-fnal Dec 30, 2024
460900d
Change dev server to use SSLCACertificatePath instead of SSLCACertifi…
bjwhite-fnal Jan 2, 2025
66e9e7c
Turn back on gridcert patch for some containers.
bjwhite-fnal Jan 3, 2025
b1603d9
Change prod server to use SSLCACertificatePath instead of SSLCACertif…
bjwhite-fnal Jan 3, 2025
19d0c8a
Switch dev grid certificates to PVC, and update with CronJob.
bjwhite-fnal Jan 6, 2025
9200532
Switch prod grid certificates to PVC, and update with CronJob.
bjwhite-fnal Jan 6, 2025
799d812
Set sleepTime for conveyor-poller/finisher.
bjwhite-fnal Jan 13, 2025
24dcbcc
Dev: Disable useDeprecatedImplicitSecrets.
bjwhite-fnal Jan 13, 2025
2aee70a
Fix hermes constant mount for reaper.
bjwhite-fnal Jan 14, 2025
ae6ab6c
Prod: Dev: Disable useDeprecatedImplicitSecrets. Enable webui.
bjwhite-fnal Jan 14, 2025
299a9c9
Dev WebUI CORS fix.
bjwhite-fnal Jan 17, 2025
e4d6414
Update CNPH to 1.25, migrate DB to Postgres 16.6 and fixed helm gener…
yuyiguo Feb 19, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 11 additions & 21 deletions overlays/dev/Makefile
Original file line number Diff line number Diff line change
@@ -1,36 +1,28 @@
SERVER_CHART_VERSION := 32.0.0
DAEMON_CHART_VERSION := 32.0.2
UI_CHART_VERSION := 32.0.1
ELASTIC_VERSION := 0.8.0
SERVER_CHART_VERSION := 35.0.0
DAEMON_CHART_VERSION := 35.0.2
UI_CHART_VERSION := 35.1.0

helm:
helm repo add rucio https://rucio.github.io/helm-charts
helm repo add elastic https://helm.elastic.co
helm repo update rucio elastic
helm repo update rucio

rucio-server: helm
helm template usdf rucio/rucio-server --version=${SERVER_CHART_VERSION} --values=rucio/values-rucio-server.yaml > rucio/helm-rucio-server.yaml
helm template usdf rucio/rucio-server --namespace rucio --version=${SERVER_CHART_VERSION} --values=rucio/values-rucio-server.yaml > rucio/helm-rucio-server.yaml

rucio-daemons: helm
helm template usdf rucio/rucio-daemons --version=${DAEMON_CHART_VERSION} --values=rucio/values-rucio-daemons.yaml > rucio/helm-rucio-daemons.yaml
helm template usdf rucio/rucio-daemons --namespace rucio --version=${DAEMON_CHART_VERSION} --values=rucio/values-rucio-daemons.yaml > rucio/helm-rucio-daemons.yaml

rucio-ui: helm
helm template usdf rucio/rucio-ui --version=${UI_CHART_VERSION} --values=rucio/values-rucio-ui.yaml > rucio/helm-rucio-ui.yaml
helm template usdf rucio/rucio-webui --namespace rucio --version=${UI_CHART_VERSION} --values=rucio/values-rucio-ui.yaml > rucio/helm-rucio-ui.yaml

rucio: rucio-server rucio-daemons rucio-ui

elasticsearch:
helm template elasticsearch elastic/eck-elasticsearch --version=${ELASTIC_VERSION} --values=elastic/elasticsearch/values-elasticsearch.yaml > elastic/elasticsearch/helm-elasticsearch.yaml
vi elastic/elasticsearch/helm-elasticsearch.yaml -c ":%s/enterprise/basic/g" -c ":wq"

elastic: elasticsearch

get-secrets:
mkdir -p rucio/etc/.secrets
vault kv get --field=usdf-server-hostkey secret/rubin/usdf-rucio-dev/rucio > rucio/etc/.secrets/hostkey.pem
vault kv get --field=usdf-server-hostcert secret/rubin/usdf-rucio-dev/rucio > rucio/etc/.secrets/hostcert.pem
vault kv get --field=usdf-server-cafile secret/rubin/usdf-rucio-dev/rucio > rucio/etc/.secrets/ca.pem
vault kv get --field=usdf-db-conn-str secret/rubin/usdf-rucio-dev/rucio > rucio/etc/.secrets/db-conn-str.txt
vault kv get --field=usdf-db-16b-conn-str secret/rubin/usdf-rucio-dev/rucio > rucio/etc/.secrets/db-conn-str.txt
vault kv get --field=usdf-elasticsearch-password secret/rubin/usdf-rucio-dev/rucio > rucio/etc/.secrets/usdf-elasticsearch-password
cp rucio/etc/automatix.json rucio/etc/.secrets/automatix.json
mkdir -p postgres/etc/.secrets
Expand All @@ -47,16 +39,14 @@ clean-secrets:
run-dump:
kubectl kustomize .

dump: get-secrets rucio elastic run-dump clean-secrets
dump: get-secrets rucio run-dump clean-secrets

run-apply:
kubectl apply -k .

apply: get-secrets rucio elastic run-apply clean-secrets
apply: get-secrets rucio run-apply clean-secrets

run-destroy:
kubectl delete -k .

destroy: get-secrets rucio elastic run-destroy clean-secrets


destroy: get-secrets rucio run-destroy clean-secrets
4 changes: 3 additions & 1 deletion overlays/dev/data-backbone/kafka/kafka-persistent.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,8 @@ spec:
port: 9094
type: loadbalancer
tls: false
#authentication:
# type: scram-sha-512
configuration:
bootstrap:
annotations:
Expand Down Expand Up @@ -47,7 +49,7 @@ spec:
- id: 0
type: persistent-claim
class: wekafs--sdf-k8s01
size: 1Gi
size: 5Gi
deleteClaim: false
zookeeper:
replicas: 3
Expand Down
1 change: 1 addition & 0 deletions overlays/dev/data-backbone/kafka/kustomization.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,3 +4,4 @@ resources:
- ns.yaml
- kafka-persistent.yaml
- topics.yaml
- users.yaml
34 changes: 24 additions & 10 deletions overlays/dev/data-backbone/kafka/topics.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,8 @@ spec:
partitions: 3
replicas: 2
config:
retention.ms: 604800000
segment.bytes: 1073741824
retention.ms: 604800
segment.bytes: 268435456
---
apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaTopic
Expand All @@ -23,8 +23,8 @@ spec:
partitions: 3
replicas: 2
config:
retention.ms: 604800000
segment.bytes: 1073741824
retention.ms: 604800
segment.bytes: 268435456
---
apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaTopic
Expand All @@ -37,8 +37,8 @@ spec:
partitions: 3
replicas: 2
config:
retention.ms: 604800000
segment.bytes: 1073741824
retention.ms: 604800
segment.bytes: 268435456
---
apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaTopic
Expand All @@ -51,8 +51,8 @@ spec:
partitions: 3
replicas: 2
config:
retention.ms: 604800000
segment.bytes: 1073741824
retention.ms: 604800
segment.bytes: 268435456
---
apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaTopic
Expand All @@ -65,5 +65,19 @@ spec:
partitions: 3
replicas: 2
config:
retention.ms: 604800000
segment.bytes: 1073741824
retention.ms: 604800
segment.bytes: 268435456
---
apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaTopic
metadata:
name: slac-butler-dev-disk
labels:
strimzi.io/cluster: rucio-kafka
spec:
topicName: SLAC_BUTLER_DEV_DISK
partitions: 3
replicas: 2
config:
retention.ms: 604800
segment.bytes: 268435456
9 changes: 9 additions & 0 deletions overlays/dev/data-backbone/kafka/users.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaUser
metadata:
name: usdfkafka
labels:
strimzi.io/cluster: rucio-kafka
spec:
authentication:
type: scram-sha-512
59 changes: 0 additions & 59 deletions overlays/dev/elastic/elasticsearch/helm-elasticsearch.yaml

This file was deleted.

9 changes: 0 additions & 9 deletions overlays/dev/elastic/elasticsearch/kustomization.yaml

This file was deleted.

150 changes: 0 additions & 150 deletions overlays/dev/elastic/elasticsearch/rucio_events.json

This file was deleted.

Loading