Add Reconfigure, UpdateVersion, Reconfigure TLS for SQL Server (#714)

* Finish standalone Signed-off-by: Neaj Morshad <[email protected]> * Finish reconfigure for ag Signed-off-by: Neaj Morshad <[email protected]> * Fix index Signed-off-by: Neaj Morshad <[email protected]> * Update images Signed-off-by: Neaj Morshad <[email protected]> * Add Update Version doc Signed-off-by: Neaj Morshad <[email protected]> * Add volume expansion standalone Signed-off-by: Neaj Morshad <[email protected]> * reconfigure tls overview Signed-off-by: Neaj Morshad <[email protected]> * reconfigure tls guide wip tls added Signed-off-by: Neaj Morshad <[email protected]> * Finish reconfigure tls for standalone Signed-off-by: Neaj Morshad <[email protected]> * Finish reconfigure tls for ag Signed-off-by: Neaj Morshad <[email protected]> * Add reconfigure tls image Signed-off-by: Neaj Morshad <[email protected]> * Update concepts Signed-off-by: Neaj Morshad <[email protected]> * Update yamls Signed-off-by: Neaj Morshad <[email protected]> * Add review changes Signed-off-by: Neaj Morshad <[email protected]> --------- Signed-off-by: Neaj Morshad <[email protected]>
kubedb · Dec 17, 2024 · 7786905 · 7786905
1 parent 6d67a6e
commit 7786905
Show file tree

Hide file tree

Showing 51 changed files with 4,923 additions and 65 deletions.
diff --git a/docs/examples/mssqlserver/reconfigure-tls/issuer.yaml b/docs/examples/mssqlserver/reconfigure-tls/issuer.yaml
@@ -0,0 +1,8 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: mssqlserver-ca-issuer
+  namespace: demo
+spec:
+  ca:
+    secretName: mssqlserver-ca
diff --git a/docs/examples/mssqlserver/reconfigure-tls/ms-standalone.yaml b/docs/examples/mssqlserver/reconfigure-tls/ms-standalone.yaml
@@ -0,0 +1,32 @@
+apiVersion: kubedb.com/v1alpha2
+kind: MSSQLServer
+metadata:
+  name: ms-standalone
+  namespace: demo
+spec:
+  version: "2022-cu12"
+  replicas: 1
+  tls:
+    issuerRef:
+      name: mssqlserver-ca-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
+    clientTLS: false
+  podTemplate:
+    spec:
+      containers:
+        - name: mssql
+          env:
+            - name: ACCEPT_EULA
+              value: "Y"
+            - name: MSSQL_PID
+              value: Evaluation
+  storageType: Durable
+  storage:
+    storageClassName: "standard"
+    accessModes:
+      - ReadWriteOnce
+    resources:
+      requests:
+        storage: 1Gi
+  deletionPolicy: WipeOut
diff --git a/docs/examples/mssqlserver/reconfigure-tls/msops-add-tls.yaml b/docs/examples/mssqlserver/reconfigure-tls/msops-add-tls.yaml
@@ -0,0 +1,24 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-add-tls
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: ms-standalone
+  tls:
+    issuerRef:
+      name: mssqlserver-ca-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
+    certificates:
+      - alias: client
+        subject:
+          organizations:
+            - mssqlserver
+          organizationalUnits:
+            - client
+    clientTLS: true
+  timeout: 5m
+  apply: IfReady
diff --git a/docs/examples/mssqlserver/reconfigure-tls/msops-ag-add-tls.yaml b/docs/examples/mssqlserver/reconfigure-tls/msops-ag-add-tls.yaml
@@ -0,0 +1,24 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-ag-add-tls
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: mssql-ag-cluster
+  tls:
+    issuerRef:
+      name: mssqlserver-ca-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
+    certificates:
+      - alias: client
+        subject:
+          organizations:
+            - mssqlserver
+          organizationalUnits:
+            - client
+    clientTLS: true
+  timeout: 5m
+  apply: IfReady
diff --git a/docs/examples/mssqlserver/reconfigure-tls/msops-ag-change-issuer.yaml b/docs/examples/mssqlserver/reconfigure-tls/msops-ag-change-issuer.yaml
@@ -0,0 +1,14 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-ag-change-issuer
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: mssql-ag-cluster
+  tls:
+    issuerRef:
+      name: mssqlserver-new-ca-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
diff --git a/docs/examples/mssqlserver/reconfigure-tls/msops-ag-remove.yaml b/docs/examples/mssqlserver/reconfigure-tls/msops-ag-remove.yaml
@@ -0,0 +1,11 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-ag-remove
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: mssql-ag-cluster
+  tls:
+    remove: true
diff --git a/docs/examples/mssqlserver/reconfigure-tls/msops-ag-rotate.yaml b/docs/examples/mssqlserver/reconfigure-tls/msops-ag-rotate.yaml
@@ -0,0 +1,13 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-ag-rotate
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: mssql-ag-cluster
+  tls:
+    rotateCertificates: true
+  timeout: 5m
+  apply: IfReady
diff --git a/docs/examples/mssqlserver/reconfigure-tls/msops-change-issuer.yaml b/docs/examples/mssqlserver/reconfigure-tls/msops-change-issuer.yaml
@@ -0,0 +1,14 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-change-issuer
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: ms-standalone
+  tls:
+    issuerRef:
+      name: mssqlserver-new-ca-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
diff --git a/docs/examples/mssqlserver/reconfigure-tls/msops-remove.yaml b/docs/examples/mssqlserver/reconfigure-tls/msops-remove.yaml
@@ -0,0 +1,11 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-remove
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: ms-standalone
+  tls:
+    remove: true
diff --git a/docs/examples/mssqlserver/reconfigure-tls/msops-rotate.yaml b/docs/examples/mssqlserver/reconfigure-tls/msops-rotate.yaml
@@ -0,0 +1,13 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-rotate
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: ms-standalone
+  tls:
+    rotateCertificates: true
+  timeout: 5m
+  apply: IfReady
diff --git a/docs/examples/mssqlserver/reconfigure-tls/mssql-ag-cluster.yaml b/docs/examples/mssqlserver/reconfigure-tls/mssql-ag-cluster.yaml
@@ -0,0 +1,44 @@
+apiVersion: kubedb.com/v1alpha2
+kind: MSSQLServer
+metadata:
+  name: mssql-ag-cluster
+  namespace: demo
+spec:
+  version: "2022-cu12"
+  replicas: 3
+  topology:
+    mode: AvailabilityGroup
+    availabilityGroup:
+      databases:
+        - agdb1
+        - agdb2
+  tls:
+    issuerRef:
+      name: mssqlserver-ca-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
+    clientTLS: false
+  podTemplate:
+    spec:
+      containers:
+        - name: mssql
+          env:
+            - name: ACCEPT_EULA
+              value: "Y"
+            - name: MSSQL_PID
+              value: Evaluation
+          resources:
+            requests:
+              cpu: "500m"
+              memory: "1.5Gi"
+            limits:
+              memory: "2Gi"
+  storageType: Durable
+  storage:
+    storageClassName: "standard"
+    accessModes:
+      - ReadWriteOnce
+    resources:
+      requests:
+        storage: 1Gi
+  deletionPolicy: WipeOut
diff --git a/docs/examples/mssqlserver/reconfigure-tls/new-issuer.yaml b/docs/examples/mssqlserver/reconfigure-tls/new-issuer.yaml
@@ -0,0 +1,8 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: mssqlserver-new-ca-issuer
+  namespace: demo
+spec:
+  ca:
+    secretName: mssqlserver-new-ca
diff --git a/docs/examples/mssqlserver/reconfigure/ms-standalone.yaml b/docs/examples/mssqlserver/reconfigure/ms-standalone.yaml
@@ -0,0 +1,34 @@
+apiVersion: kubedb.com/v1alpha2
+kind: MSSQLServer
+metadata:
+  name: ms-standalone
+  namespace: demo
+spec:
+  version: "2022-cu12"
+  configSecret:
+    name: ms-custom-config
+  replicas: 1
+  tls:
+    issuerRef:
+      name: mssqlserver-ca-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
+    clientTLS: false
+  podTemplate:
+    spec:
+      containers:
+        - name: mssql
+          env:
+            - name: ACCEPT_EULA
+              value: "Y"
+            - name: MSSQL_PID
+              value: Evaluation
+  storageType: Durable
+  storage:
+    storageClassName: "standard"
+    accessModes:
+      - ReadWriteOnce
+    resources:
+      requests:
+        storage: 1Gi
+  deletionPolicy: WipeOut
diff --git a/docs/examples/mssqlserver/reconfigure/msops-reconfigure-ag-apply.yaml b/docs/examples/mssqlserver/reconfigure/msops-reconfigure-ag-apply.yaml
@@ -0,0 +1,16 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-reconfigure-ag-apply
+  namespace: demo
+spec:
+  type: Reconfigure
+  databaseRef:
+    name: mssqlserver-ag-cluster
+  configuration:
+    applyConfig:
+      mssql.conf: |-
+        [memory]
+        memorylimitmb = 3072
+  timeout: 5m
+  apply: IfReady
diff --git a/docs/examples/mssqlserver/reconfigure/msops-reconfigure-ag.yaml b/docs/examples/mssqlserver/reconfigure/msops-reconfigure-ag.yaml
@@ -0,0 +1,14 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-reconfigure-ag
+  namespace: demo
+spec:
+  type: Reconfigure
+  databaseRef:
+    name: mssqlserver-ag-cluster
+  configuration:
+    configSecret:
+      name: new-custom-config
+  timeout: 5m
+  apply: IfReady
diff --git a/docs/examples/mssqlserver/reconfigure/msops-reconfigure-standalone-apply.yaml b/docs/examples/mssqlserver/reconfigure/msops-reconfigure-standalone-apply.yaml
@@ -0,0 +1,16 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-reconfigure-standalone-apply
+  namespace: demo
+spec:
+  type: Reconfigure
+  databaseRef:
+    name: ms-standalone
+  configuration:
+    applyConfig:
+      mssql.conf: |-
+        [memory]
+        memorylimitmb = 3072
+  timeout: 5m
+  apply: IfReady
diff --git a/docs/examples/mssqlserver/reconfigure/msops-reconfigure-standalone.yaml b/docs/examples/mssqlserver/reconfigure/msops-reconfigure-standalone.yaml
@@ -0,0 +1,14 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: MSSQLServerOpsRequest
+metadata:
+  name: msops-reconfigure-standalone
+  namespace: demo
+spec:
+  type: Reconfigure
+  databaseRef:
+    name: ms-standalone
+  configuration:
+    configSecret:
+      name: new-custom-config
+  timeout: 5m
+  apply: IfReady
diff --git a/docs/examples/mssqlserver/reconfigure/mssqlserver-ag-cluster.yaml b/docs/examples/mssqlserver/reconfigure/mssqlserver-ag-cluster.yaml
@@ -0,0 +1,40 @@
+apiVersion: kubedb.com/v1alpha2
+kind: MSSQLServer
+metadata:
+  name: mssqlserver-ag-cluster
+  namespace: demo
+spec:
+  version: "2022-cu12"
+  configSecret:
+    name: ms-custom-config
+  replicas: 3
+  topology:
+    mode: AvailabilityGroup
+    availabilityGroup:
+      databases:
+        - agdb1
+        - agdb2
+  tls:
+    issuerRef:
+      name: mssqlserver-ca-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
+    clientTLS: false
+  podTemplate:
+    spec:
+      containers:
+        - name: mssql
+          env:
+            - name: ACCEPT_EULA
+              value: "Y"
+            - name: MSSQL_PID
+              value: Developer
+  storageType: Durable
+  storage:
+    storageClassName: "standard"
+    accessModes:
+      - ReadWriteOnce
+    resources:
+      requests:
+        storage: 1Gi
+  deletionPolicy: WipeOut