refactor: add oss storage configure

charts/greptimedb/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: greptimedb
 description: A Helm chart for deploying GreptimeDB cluster in Kubernetes
 type: application
-version: 0.1.1-alpha.13
+version: 0.1.1-alpha.14
 appVersion: 0.3.2

charts/greptimedb/templates/cluster.yaml

@@ -62,11 +62,18 @@ spec:
       bucket: {{ .Values.storage.s3.bucket }}
       region: {{ .Values.storage.s3.region }}
       root: {{ .Values.storage.s3.root }}
-      secretName: {{ .Values.storage.s3.credentials.secretName }}
+      secretName: {{ .Values.storage.s3.secretName }}
       endpoint: {{ .Values.storage.s3.endpoint }}
     {{- else if .Values.storage.local }}
     local:
       directory: {{ .Values.storage.local.directory }}
+    {{- else if .Values.storage.oss }}
+    oss:
+      bucket: {{ .Values.storage.oss.bucket }}
+      region: {{ .Values.storage.oss.region }}
+      root: {{ .Values.storage.oss.root }}
+      secretName: {{ .Values.storage.oss.secretName }}
+      endpoint: {{ .Values.storage.oss.endpoint }}
     {{- else }}
     {}
     {{- end }}

charts/greptimedb/templates/credentials-sealed-secret.yaml

@@ -0,0 +1,20 @@
+{{- if .Values.storage.credentials }}
+{{- if .Values.storage.credentials.secretCreation }}
+{{- if and (eq .Values.storage.credentials.secretCreation.enabled true) (eq .Values.storage.credentials.secretCreation.enableEncryption true) }}
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: {{ .Values.storage.credentials.secretName }}
+  namespace:  {{ .Release.Namespace }}
+spec:
+  encryptedData:
+    {{- range $key, $value := .Values.storage.credentials.secretCreation.data }}
+    {{ $key }}: {{ $value | quote }}
+    {{- end }}
+  template:
+    metadata:
+      name: {{ .Values.storage.credentials.secretName }}
+      namespace: {{ .Release.Namespace }}
+{{- end }}
+{{- end }}
+{{- end }}

charts/greptimedb/templates/credentials-secret.yaml

@@ -0,0 +1,16 @@
+{{- if .Values.storage.credentials }}
+{{- if .Values.storage.credentials.secretCreation }}
+{{- if and (eq .Values.storage.credentials.secretCreation.enabled true) (eq .Values.storage.credentials.secretCreation.enableEncryption false) }}
+apiVersion: v1
+metadata:
+  name: {{ .Values.storage.credentials.secretName }}
+  namespace: {{ .Release.Namespace }}
+kind: Secret
+type: Opaque
+data:
+  {{- range $key, $value := .Values.storage.credentials.secretCreation.data }}
+  {{ $key }}: {{ $value | b64enc | quote }}
+  {{- end }}
+{{- end }}
+{{- end }}
+{{- end }}

charts/greptimedb/values.yaml

@@ -46,7 +46,7 @@ datanode:
 initializer:
   registry: docker.io
   repository: greptime/greptimedb-initializer
-  tag: 0.1.0-alpha.14
+  tag: 0.1.0-alpha.16
 
 # The etcdEndpoints need be modified to the actual etcd cluster.
 etcdEndpoints: "etcd.default.svc.cluster.local:2379"
@@ -68,29 +68,42 @@ prometheusMonitor: {}
 #    release: prometheus
 
 storage:
+#  credentials:
+#    secretName: "credentials"
+#    secretCreation:
+#    # Create the raw secret.
+#      enabled: true
+#      # Create the sealed secret.
+#      # If enableEncryption is true, the credentials should be encrypted.
+#      enableEncryption: false
+#
+#      # If the enableEncryption is true, the data should be set as encrypted data.
+#      data:
+#        access-key-id: "you-should-set-the-access-key-id-here"
+#        secret-access-key: "you-should-set-the-secret-access-key-here"
+
   # configure to use local storage.
   local: {}
 #    directory: /tmp/greptimedb
 
   # configure to use s3 storage.
-  s3: {}
-#    bucket: "mycluster"
+  s3:
+#    bucket: "bucket-name"
 #    region: "us-west-2"
-#
+
 #    # The root directory of the cluster.
 #    # The data directory in S3 will be: 's3://<bucket>/<root>/data/...'.
 #    root: "mycluster"
 #    endpoint: "s3.us-west-2.amazonaws.com"
-#    credentials:
-#      secretName: "s3-credentials"
-#      secretCreation:
-#        # Create the raw secret.
-#        enabled: true
-#        # Create the sealed secret.
-#        # If enableEncryption is true, the credentials should be encrypted.
-#        enableEncryption: false
-#
-#        # If the enableEncryption is true, the data should be set as encrypted data.
-#        data:
-#          access-key-id: "you-should-set-the-access-key-id-here"
-#          secret-access-key: "you-should-set-the-secret-access-key-here"
+#    secretName: "credentials"
+
+  # configure to use oss storage.
+  oss: {}
+#    bucket: "bucket-name"
+#    region: "cn-hangzhou"
+
+#    # The root directory of the cluster.
+#    # The data directory in OSS will be: 'oss://<bucket>/<root>/data/...'.
+#    root: "mycluster"
+#    endpoint: "oss-cn-hangzhou.aliyuncs.com"
+#    secretName: "credentials"