diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index ccc944c..22f8688 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -6,8 +6,6 @@ Contributions are welcome via GitHub pull requests. This document outlines the p Isssues or Pull requests to a chart should be created with prefix `[charts/]` eg: `[charts/metabase]` -_For now, there's only one chart, then this is just a best practice_ - **Bumping chart version** Every PR should include chart version bump, because we can not have different version of the charts with the same version name. diff --git a/charts/pgbouncer/.helmignore b/charts/pgbouncer/.helmignore new file mode 100644 index 0000000..0e8a0eb --- /dev/null +++ b/charts/pgbouncer/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/charts/pgbouncer/Chart.yaml b/charts/pgbouncer/Chart.yaml new file mode 100644 index 0000000..4745a64 --- /dev/null +++ b/charts/pgbouncer/Chart.yaml @@ -0,0 +1,10 @@ +apiVersion: v2 +name: pgbouncer +version: "0.1.0" +description: A Helm chart for Pgbouncer +type: application +home: https://github.com/pmint93/helm-charts +maintainers: +- name: pmint93 + url: https://github.com/pmint93 +appVersion: "v1.21.0" diff --git a/charts/pgbouncer/templates/NOTES.txt b/charts/pgbouncer/templates/NOTES.txt new file mode 100644 index 0000000..268c1f1 --- /dev/null +++ b/charts/pgbouncer/templates/NOTES.txt @@ -0,0 +1,32 @@ +PgBouncer has been installed! + +{{- if contains "NodePort" .Values.service.type }} + +PgBouncer is exposed as a `NodePort` type service. +Get the address by running these commands: + + export NODE_PORT=$(kubectl --namespace {{ .Release.Namespace }} get services -o jsonpath="{.spec.ports[0].nodePort}" {{ include "pgbouncer.fullname" . }}) + export NODE_IP=$(kubectl --namespace {{ .Release.Namespace }} get nodes -o jsonpath="{.items[0].status.addresses[1].address}") + + echo "Connect to PgBouncer by using IP address: $NODE_IP and port number: $NODE_PORT" + +{{- else if contains "LoadBalancer" .Values.service.type }} + +PgBouncer is exposed as a `LoadBalancer` type service. +It may take a few minutes for the LoadBalancer IP to be available. +You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "pgbouncer.fullname" . }}' + + export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "pgbouncer.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}") + echo "Connect to PgBouncer by using IP address: $SERVICE_IP and port number: {{ .Values.service.port }}" + +{{- else if contains "ClusterIP" .Values.service.type }} + +PgBouncer is exposed as a `ClusterIP` type service. +Get the address by running these commands: + + export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "pgbouncer.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}") + export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}") + echo "Connect to PgBouncer by using IP address: 127.0.0.1 and port number: 5432" + kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 5432:$CONTAINER_PORT + +{{- end }} diff --git a/charts/pgbouncer/templates/_helpers.tpl b/charts/pgbouncer/templates/_helpers.tpl new file mode 100644 index 0000000..ed5bdb7 --- /dev/null +++ b/charts/pgbouncer/templates/_helpers.tpl @@ -0,0 +1,51 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "pgbouncer.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "pgbouncer.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "pgbouncer.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "pgbouncer.labels" -}} +helm.sh/chart: {{ include "pgbouncer.chart" . }} +{{ include "pgbouncer.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "pgbouncer.selectorLabels" -}} +app.kubernetes.io/name: {{ include "pgbouncer.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} diff --git a/charts/pgbouncer/templates/_pgbouncer-other.ini.tpl b/charts/pgbouncer/templates/_pgbouncer-other.ini.tpl new file mode 100644 index 0000000..f0d4e38 --- /dev/null +++ b/charts/pgbouncer/templates/_pgbouncer-other.ini.tpl @@ -0,0 +1,5 @@ +{{- define "pgbouncer-other.ini" -}} +{{- range $k, $v := .Values.extraSettings -}} +{{ $k }} = {{ $v }} +{{- end -}} +{{- end -}} diff --git a/charts/pgbouncer/templates/_pgbouncer.ini.tpl b/charts/pgbouncer/templates/_pgbouncer.ini.tpl new file mode 100644 index 0000000..57a0d0e --- /dev/null +++ b/charts/pgbouncer/templates/_pgbouncer.ini.tpl @@ -0,0 +1,400 @@ +{{- define "pgbouncer.ini" -}} +;;; +;;; PgBouncer configuration file +;;; + +;; database name = connect string +;; +;; connect string params: +;; dbname= host= port= user= password= auth_user= +;; client_encoding= datestyle= timezone= +;; pool_size= reserve_pool= max_db_connections= +;; pool_mode= connect_query= application_name= +[databases] +{{- range $k, $v := .Values.databases }} +{{ $k }} = {{ $v }} +{{- end }} + +;; foodb over Unix socket +;foodb = + +;; redirect bardb to bazdb on localhost +;bardb = host=localhost dbname=bazdb + +;; access to dest database will go with single user +;forcedb = host=localhost port=300 user=baz password=foo client_encoding=UNICODE datestyle=ISO connect_query='SELECT 1' + +;; use custom pool sizes +;nondefaultdb = pool_size=50 reserve_pool=10 + +;; use auth_user with auth_query if user not present in auth_file +;; auth_user must exist in auth_file +; foodb = auth_user=bar + +;; run auth_query on a specific database. +; bardb = auth_dbname=foo + +;; fallback connect string +;* = host=testserver + +;; User-specific configuration +[users] +{{- range $user := .Values.users }} +{{- with $user.options }} +{{ $user.name | quote }} ={{ if $user.pool_mode }} pool_mode={{ $user.pool_mode }}{{end}} {{ if $user.max_user_connections }} max_user_connections={{ $user.max_user_connections }}{{end}} +{{- end }} +{{- end }} + +;user1 = pool_mode=transaction max_user_connections=10 + +;; Configuration section +[pgbouncer] + +;;; +;;; Administrative settings +;;; + +; logfile = /var/log/pgbouncer/pgbouncer.log +; pidfile = /var/run/pgbouncer/pgbouncer.pid + +;;; +;;; Where to wait for clients +;;; + +;; IP address or * which means all IPs +listen_addr = 0.0.0.0 +listen_port = 5432 + +;; Unix socket is also used for -R. +;; On Debian it should be /var/run/postgresql +;unix_socket_dir = /tmp +;unix_socket_mode = 0777 +;unix_socket_group = + +;; The peer id used to identify this pgbouncer process in a group of pgbouncer +;; processes that are peered together. When set to 0 pgbouncer peering is disabled +;peer_id = 0 + +;;; +;;; TLS settings for accepting clients +;;; + +;; disable, allow, require, verify-ca, verify-full +;client_tls_sslmode = disable + +;; Path to file that contains trusted CA certs +;client_tls_ca_file = + +;; Private key and cert to present to clients. +;; Required for accepting TLS connections from clients. +;client_tls_key_file = +;client_tls_cert_file = + +;; default, secure, fast, normal, +;client_tls_ciphers = default + +;; all, secure, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3 +;client_tls_protocols = secure + +;; none, auto, legacy +;client_tls_dheparams = auto + +;; none, auto, +;client_tls_ecdhcurve = auto + +;;; +;;; TLS settings for connecting to backend databases +;;; + +;; disable, allow, require, verify-ca, verify-full +;server_tls_sslmode = disable + +;; Path to that contains trusted CA certs +;server_tls_ca_file = + +;; Private key and cert to present to backend. +;; Needed only if backend server require client cert. +;server_tls_key_file = +;server_tls_cert_file = + +;; all, secure, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3 +;server_tls_protocols = secure + +;; default, secure, fast, normal, +;server_tls_ciphers = default + +;;; +;;; Authentication settings +;;; + +;; any, trust, plain, md5, cert, hba, pam +auth_type = {{ .Values.settings.auth_type }} +auth_file = /etc/pgbouncer/userlist.txt + +;; Path to HBA-style auth config +;auth_hba_file = + +{{- with .Values.settings.auth_user }} +auth_user = {{ . }} +{{- end }} + +;; Query to use to fetch password from database. Result +;; must have 2 columns - username and password hash. +{{- with .Values.settings.auth_query }} +auth_query = {{ . }} +{{- end }} + +;; Authentication database that can be set globally to run "auth_query". +;auth_dbname = + +;;; +;;; Users allowed into database 'pgbouncer' +;;; + +;; comma-separated list of users who are allowed to change settings +;admin_users = user2, someadmin, otheradmin + +;; comma-separated list of users who are just allowed to use SHOW command +;stats_users = stats, root + +;;; +;;; Pooler personality questions +;;; + +;; When server connection is released back to pool: +;; session - after client disconnects (default) +;; transaction - after transaction finishes +;; statement - after statement finishes +pool_mode = {{ .Values.settings.pool_mode | default "session" }} + +;; Number of prepared statements to cache on a server connection (zero value +;; disables support of prepared statements). +;max_prepared_statements = 0 + +;; Query for cleaning connection immediately after releasing from +;; client. No need to put ROLLBACK here, pgbouncer does not reuse +;; connections where transaction is left open. +;server_reset_query = DISCARD ALL + +;; Whether server_reset_query should run in all pooling modes. If it +;; is off, server_reset_query is used only for session-pooling. +;server_reset_query_always = 0 + +;; Comma-separated list of parameters to track per client. The +;; Postgres parameters listed here will be cached per client by +;; pgbouncer and restored in server everytime the client runs a query. +;track_extra_parameters = IntervalStyle + +;; Comma-separated list of parameters to ignore when given in startup +;; packet. Newer JDBC versions require the extra_float_digits here. +;ignore_startup_parameters = extra_float_digits + +;; When taking idle server into use, this query is run first. +;server_check_query = select 1 + +;; If server was used more recently that this many seconds ago, +;; skip the check query. Value 0 may or may not run in immediately. +;server_check_delay = 30 + +;; Close servers in session pooling mode after a RECONNECT, RELOAD, +;; etc. when they are idle instead of at the end of the session. +;server_fast_close = 0 + +;; Use as application_name on server. +;application_name_add_host = 0 + +;; Period for updating aggregated stats. +;stats_period = 60 + +;;; +;;; Connection limits +;;; + +;; Total number of clients that can connect +max_client_conn = {{ .Values.connectionLimits.max_client_conn }} + +;; Default pool size. 20 is good number when transaction pooling +;; is in use, in session pooling it needs to be the number of +;; max clients you want to handle at any moment +default_pool_size = {{ .Values.connectionLimits.default_pool_size }} + +;; Minimum number of server connections to keep in pool. +min_pool_size = {{ .Values.connectionLimits.min_pool_size }} + +; how many additional connection to allow in case of trouble +reserve_pool_size = {{ .Values.connectionLimits.reserve_pool_size }} + +;; If a clients needs to wait more than this many seconds, use reserve +;; pool. +reserve_pool_timeout = {{ .Values.connectionLimits.reserve_pool_timeout }} + +;; Maximum number of server connections for a database +;max_db_connections = 0 + +;; Maximum number of server connections for a user +;max_user_connections = 0 + +;; If off, then server connections are reused in LIFO manner +;server_round_robin = 0 + +;;; +;;; Logging +;;; + +;; Syslog settings +;syslog = 0 +;syslog_facility = daemon +;syslog_ident = pgbouncer + +;; log if client connects or server connection is made +log_connections = {{ .Values.logging.log_connections }} + +;; log if and why connection was closed +log_disconnections = {{ .Values.logging.log_disconnections }} + +;; log error messages pooler sends to clients +log_pooler_errors = {{ .Values.logging.log_pooler_errors }} + +;; write aggregated stats into log +log_stats = {{ .Values.logging.log_stats }} + +;; Logging verbosity. Same as -v switch on command line. +verbose = {{ .Values.logging.verbose }} + +;;; +;;; Timeouts +;;; + +;; Close server connection if its been connected longer. +;server_lifetime = 3600 + +;; Close server connection if its not been used in this time. Allows +;; to clean unnecessary connections from pool after peak. +;server_idle_timeout = 600 + +;; Cancel connection attempt if server does not answer takes longer. +;server_connect_timeout = 15 + +;; If server login failed (server_connect_timeout or auth failure) +;; then wait this many second before trying again. +;server_login_retry = 15 + +;; Dangerous. Server connection is closed if query does not return in +;; this time. Should be used to survive network problems, _not_ as +;; statement_timeout. (default: 0) +;query_timeout = 0 + +;; Dangerous. Client connection is closed if the query is not +;; assigned to a server in this time. Should be used to limit the +;; number of queued queries in case of a database or network +;; failure. (default: 120) +;query_wait_timeout = 120 + +;; Dangerous. Client connection is closed if the cancellation request +;; is not assigned to a server in this time. Should be used to limit +;; the time a client application blocks on a queued cancel request in +;; case of a database or network failure. (default: 10) +;cancel_wait_timeout = 10 + +;; Dangerous. Client connection is closed if no activity in this +;; time. Should be used to survive network problems. (default: 0) +;client_idle_timeout = 0 + +;; Disconnect clients who have not managed to log in after connecting +;; in this many seconds. +;client_login_timeout = 60 + +;; Clean automatically created database entries (via "*") if they stay +;; unused in this many seconds. +;autodb_idle_timeout = 3600 + +;; Close connections which are in "IDLE in transaction" state longer +;; than this many seconds. +;idle_transaction_timeout = 0 + +;; How long SUSPEND/-R waits for buffer flush before closing +;; connection. +;suspend_timeout = 10 + +;;; +;;; Low-level tuning options +;;; + +;; buffer for streaming packets +;pkt_buf = 4096 + +;; man 2 listen +;listen_backlog = 128 + +;; Max number pkt_buf to process in one event loop. +;sbuf_loopcnt = 5 + +;; Maximum PostgreSQL protocol packet size. +;max_packet_size = 2147483647 + +;; Set SO_REUSEPORT socket option +;so_reuseport = 0 + +;; networking options, for info: man 7 tcp + +;; Linux: Notify program about new connection only if there is also +;; data received. (Seconds to wait.) On Linux the default is 45, on +;; other OS'es 0. +;tcp_defer_accept = 0 + +;; In-kernel buffer size (Linux default: 4096) +;tcp_socket_buffer = 0 + +;; whether tcp keepalive should be turned on (0/1) +;tcp_keepalive = 1 + +;; The following options are Linux-specific. They also require +;; tcp_keepalive=1. + +;; Count of keepalive packets +;tcp_keepcnt = 0 + +;; How long the connection can be idle before sending keepalive +;; packets +;tcp_keepidle = 0 + +;; The time between individual keepalive probes +;tcp_keepintvl = 0 + +;; How long may transmitted data remain unacknowledged before TCP +;; connection is closed (in milliseconds) +;tcp_user_timeout = 0 + +;; DNS lookup caching time +;dns_max_ttl = 15 + +;; DNS zone SOA lookup period +;dns_zone_check_period = 0 + +;; DNS negative result caching time +;dns_nxdomain_ttl = 15 + +;; Custom resolv.conf file, to set custom DNS servers or other options +;; (default: empty = use OS settings) +;resolv_conf = /etc/pgbouncer/resolv.conf + +;;; +;;; Random stuff +;;; + +;; Hackish security feature. Helps against SQL injection: when PQexec +;; is disabled, multi-statement cannot be made. +;disable_pqexec = 0 + +;; Config file to use for next RELOAD/SIGHUP +;; By default contains config file from command line. +;conffile + +;; Windows service name to register as. job_name is alias for +;; service_name, used by some Skytools scripts. +;service_name = pgbouncer +;job_name = pgbouncer + +;; Read additional config from other file +%include /etc/pgbouncer/pgbouncer-other.ini +{{- end -}} diff --git a/charts/pgbouncer/templates/_userlist.txt.tpl b/charts/pgbouncer/templates/_userlist.txt.tpl new file mode 100644 index 0000000..4fae1f3 --- /dev/null +++ b/charts/pgbouncer/templates/_userlist.txt.tpl @@ -0,0 +1,5 @@ +{{- define "userlist.txt" -}} +{{- range $user := .Values.users -}} +{{ $user.name | quote }} {{ $user.password | quote }} +{{- end -}} +{{- end -}} diff --git a/charts/pgbouncer/templates/configmap.yaml b/charts/pgbouncer/templates/configmap.yaml new file mode 100644 index 0000000..454a8eb --- /dev/null +++ b/charts/pgbouncer/templates/configmap.yaml @@ -0,0 +1,13 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "pgbouncer.fullname" . }}-config + labels: + {{- include "pgbouncer.labels" . | nindent 4 }} +data: + userlist.txt: |- +{{ include "userlist.txt" . | indent 4 }} + pgbouncer.ini: |- +{{ include "pgbouncer.ini" . | indent 4 }} + pgbouncer-other.ini: |- +{{ include "pgbouncer-other.ini" . | indent 4 }} diff --git a/charts/pgbouncer/templates/deployment.yaml b/charts/pgbouncer/templates/deployment.yaml new file mode 100644 index 0000000..2d9b7fb --- /dev/null +++ b/charts/pgbouncer/templates/deployment.yaml @@ -0,0 +1,78 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "pgbouncer.fullname" . }} + labels: + {{- include "pgbouncer.labels" . | nindent 4 }} +spec: + replicas: {{ .Values.replicaCount }} + selector: + matchLabels: + {{- include "pgbouncer.selectorLabels" . | nindent 6 }} + strategy: + {{- toYaml .Values.updateStrategy | nindent 4 }} + template: + metadata: + {{- with .Values.podAnnotations }} + annotations: + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "pgbouncer.selectorLabels" . | nindent 8 }} + spec: + {{- with .Values.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + securityContext: + {{- toYaml .Values.podSecurityContext | nindent 8 }} + containers: + - name: {{ .Chart.Name }} + securityContext: + {{- toYaml .Values.securityContext | nindent 12 }} + image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + {{- with .Values.image.command }} + command: + {{- toYaml . | nindent 12 }} + {{- end }} + {{- with .Values.image.args }} + args: + {{- toYaml . | nindent 12 }} + {{- end }} + ports: + - name: pgbouncer + containerPort: 5432 + protocol: TCP + readinessProbe: + tcpSocket: + port: pgbouncer + initialDelaySeconds: 5 + periodSeconds: 10 + livenessProbe: + tcpSocket: + port: pgbouncer + initialDelaySeconds: 15 + periodSeconds: 15 + resources: + {{- toYaml .Values.resources | nindent 12 }} + volumeMounts: + - name: config + readOnly: true + mountPath: /etc/pgbouncer/ + volumes: + - name: config + configMap: + name: {{ include "pgbouncer.fullname" . }}-config + {{- with .Values.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} diff --git a/charts/pgbouncer/templates/service.yaml b/charts/pgbouncer/templates/service.yaml new file mode 100644 index 0000000..ff65754 --- /dev/null +++ b/charts/pgbouncer/templates/service.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ include "pgbouncer.fullname" . }} + labels: + {{- include "pgbouncer.labels" . | nindent 4 }} +spec: + type: {{ .Values.service.type }} + ports: + - port: {{ .Values.service.port }} + targetPort: pgbouncer + protocol: TCP + name: pgbouncer + selector: + {{- include "pgbouncer.selectorLabels" . | nindent 4 }} diff --git a/charts/pgbouncer/values.yaml b/charts/pgbouncer/values.yaml new file mode 100644 index 0000000..6458f2b --- /dev/null +++ b/charts/pgbouncer/values.yaml @@ -0,0 +1,87 @@ +replicaCount: 1 + +databases: {} + # example: "host=127.0.0.1 port=5432 user=pgbouncer" + # "*": "host=127.0.0.1 port=5432" + +users: [] + # - name: bob + # password: 3obSecretPwd + # options: {} # Override global settings + # # pool_mode: transaction + # # max_user_connections: 100 + +connectionLimits: + max_client_conn: 200 + default_pool_size: 20 + min_pool_size: 15 + reserve_pool_size: 25 + reserve_pool_timeout: 5 + +logging: + log_connections: 1 + log_disconnections: 1 + log_pooler_errors: 1 + log_stats: 0 + stats_period: 60 + verbose: 0 + +settings: + auth_type: md5 + auth_user: null + # In order to use auth_query, auth_user must be set + auth_query: "SELECT usename, passwd FROM pg_shadow WHERE usename=$1" + pool_mode: session + +extraSettings: + ignore_startup_parameters: extra_float_digits + +image: + repository: hyperized/pgbouncer + pullPolicy: IfNotPresent + # Overrides the image tag whose default is the chart appVersion. + tag: "" + # Overrides the image command and args + command: [] + args: + - /etc/pgbouncer/pgbouncer.ini + +imagePullSecrets: [] +nameOverride: "" +fullnameOverride: "" + +podAnnotations: {} + +podSecurityContext: {} + # fsGroup: 2000 + +securityContext: {} + # capabilities: + # drop: + # - ALL + # readOnlyRootFilesystem: true + # runAsNonRoot: true + # runAsUser: 1000 + +updateStrategy: + type: RollingUpdate + rollingUpdate: + maxUnavailable: 0 + +service: + type: ClusterIP + port: 5432 + +resources: {} + # limits: + # cpu: 100m + # memory: 128Mi + # requests: + # cpu: 100m + # memory: 128Mi + +nodeSelector: {} + +tolerations: [] + +affinity: {}