Merge pull request #216 from guangbochen/mongo2.3

charts/mongodb-replicaset/v3.9.6/.helmignore

+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+install

charts/mongodb-replicaset/v3.9.6/Chart.yaml

+apiVersion: v1
+name: mongodb-replicaset
+home: https://github.com/mongodb/mongo
+version: 3.9.6
+appVersion: 3.6
+description: NoSQL document-oriented database that stores JSON-like documents with
+  dynamic schemas, simplifying the integration of data in content-driven applications.
+icon: file://../mongo-logo.jpg
+sources:
+  - https://github.com/mongodb/mongo
+  - https://github.com/percona/mongodb_exporter
+maintainers:
+  - name: unguiculus
+    email: unguiculus@gmail.com
+  - name: steven-sheehy
+    email: ssheehy@firescope.com

charts/mongodb-replicaset/v3.9.6/OWNERS

+approvers:
+  - unguiculus
+  - steven-sheehy
+reviewers:
+  - unguiculus
+  - steven-sheehy

charts/mongodb-replicaset/v3.9.6/app-readme.md

+# MongoDB Helm Chart
+
+## Prerequisites Details
+
+* Kubernetes 1.9+
+* Kubernetes beta APIs enabled only if `podDisruptionBudget` is enabled
+* PV support on the underlying infrastructure
+
+## Chart Details
+
+This chart implements a dynamically scalable [MongoDB replica set](https://docs.mongodb.com/manual/tutorial/deploy-replica-set/)
+using Kubernetes StatefulSets and Init Containers.
\ No newline at end of file

charts/mongodb-replicaset/v3.9.6/init/on-start.sh

+#!/usr/bin/env bash
+
+# Copyright 2018 The Kubernetes Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -e pipefail
+
+port=27017
+replica_set="$REPLICA_SET"
+script_name=${0##*/}
+SECONDS=0
+timeout="${TIMEOUT:-900}"
+
+if [[ "$AUTH" == "true" ]]; then
+    admin_user="$ADMIN_USER"
+    admin_password="$ADMIN_PASSWORD"
+    admin_creds=(-u "$admin_user" -p "$admin_password")
+    if [[ "$METRICS" == "true" ]]; then
+        metrics_user="$METRICS_USER"
+        metrics_password="$METRICS_PASSWORD"
+    fi
+    auth_args=("--auth" "--keyFile=/data/configdb/key.txt")
+fi
+
+log() {
+    local msg="$1"
+    local timestamp
+    timestamp=$(date --iso-8601=ns)
+    echo "[$timestamp] [$script_name] $msg" 2>&1 | tee -a /work-dir/log.txt 1>&2
+}
+
+retry_until() {
+    local host="${1}"
+    local command="${2}"
+    local expected="${3}"
+    local creds=("${admin_creds[@]}")
+
+    # Don't need credentials for admin user creation and pings that run on localhost
+    if [[ "${host}" =~ ^localhost ]]; then
+        creds=()
+    fi
+
+    until [[ $(mongo admin --host "${host}" "${creds[@]}" "${ssl_args[@]}" --quiet --eval "${command}") == "${expected}" ]]; do
+        sleep 1
+
+        if (! ps "${pid}" &>/dev/null); then
+            log "mongod shutdown unexpectedly"
+            exit 1
+        fi
+        if [[ "${SECONDS}" -ge "${timeout}" ]]; then
+            log "Timed out after ${timeout}s attempting to bootstrap mongod"
+            exit 1
+        fi
+
+        log "Retrying ${command} on ${host}"
+    done
+}
+
+shutdown_mongo() {
+    local host="${1:-localhost}"
+    local args='force: true'
+    log "Shutting down MongoDB ($args)..."
+    if (! mongo admin --host "${host}" "${admin_creds[@]}" "${ssl_args[@]}" --eval "db.shutdownServer({$args})"); then
+      log "db.shutdownServer() failed, sending the terminate signal"
+      kill -TERM "${pid}"
+    fi
+}
+
+init_mongod_standalone() {
+    if [[ ! -f /init/initMongodStandalone.js ]]; then
+        log "Skipping init mongod standalone script"
+        return 0
+    elif [[ -z "$(ls -1A /data/db)" ]]; then
+        log "mongod standalone script currently not supported on initial install"
+        return 0
+    fi
+
+    local port="27018"
+    log "Starting a MongoDB instance as standalone..."
+    mongod --config /data/configdb/mongod.conf --dbpath=/data/db "${auth_args[@]}" --port "${port}" --bind_ip=0.0.0.0 2>&1 | tee -a /work-dir/log.txt 1>&2 &
+    export pid=$!
+    trap shutdown_mongo EXIT
+    log "Waiting for MongoDB to be ready..."
+    retry_until "localhost:${port}" "db.adminCommand('ping').ok" "1"
+    log "Running init js script on standalone mongod"
+    mongo admin --port "${port}" "${admin_creds[@]}" "${ssl_args[@]}" /init/initMongodStandalone.js
+    shutdown_mongo "localhost:${port}"
+}
+
+my_hostname=$(hostname)
+log "Bootstrapping MongoDB replica set member: $my_hostname"
+
+log "Reading standard input..."
+while read -ra line; do
+    if [[ "${line}" == *"${my_hostname}"* ]]; then
+        service_name="$line"
+    fi
+    peers=("${peers[@]}" "$line")
+done
+
+# Generate the ca cert
+ca_crt=/data/configdb/tls.crt
+if [ -f "$ca_crt"  ]; then
+    log "Generating certificate"
+    ca_key=/data/configdb/tls.key
+    pem=/work-dir/mongo.pem
+    ssl_args=(--ssl --sslCAFile "$ca_crt" --sslPEMKeyFile "$pem")
+
+# Move into /work-dir
+pushd /work-dir
+
+cat >openssl.cnf <<EOL
+[req]
+req_extensions = v3_req
+distinguished_name = req_distinguished_name
+[req_distinguished_name]
+[ v3_req ]
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+subjectAltName = @alt_names
+[alt_names]
+DNS.1 = $(echo -n "$my_hostname" | sed s/-[0-9]*$//)
+DNS.2 = $my_hostname
+DNS.3 = $service_name
+DNS.4 = localhost
+DNS.5 = 127.0.0.1
+EOL
+
+    # Generate the certs
+    openssl genrsa -out mongo.key 2048
+    openssl req -new -key mongo.key -out mongo.csr -subj "/OU=MongoDB/CN=$my_hostname" -config openssl.cnf
+    openssl x509 -req -in mongo.csr \
+        -CA "$ca_crt" -CAkey "$ca_key" -CAcreateserial \
+        -out mongo.crt -days 3650 -extensions v3_req -extfile openssl.cnf
+
+    rm mongo.csr
+    cat mongo.crt mongo.key > $pem
+    rm mongo.key mongo.crt
+fi
+
+init_mongod_standalone
+
+log "Peers: ${peers[*]}"
+log "Starting a MongoDB replica"
+mongod --config /data/configdb/mongod.conf --dbpath=/data/db --replSet="$replica_set" --port="${port}" "${auth_args[@]}" --bind_ip=0.0.0.0 2>&1 | tee -a /work-dir/log.txt 1>&2 &
+pid=$!
+trap shutdown_mongo EXIT
+
+log "Waiting for MongoDB to be ready..."
+retry_until "localhost" "db.adminCommand('ping').ok" "1"
+log "Initialized."
+
+# try to find a master
+for peer in "${peers[@]}"; do
+    log "Checking if ${peer} is primary"
+    # Check rs.status() first since it could be in primary catch up mode which db.isMaster() doesn't show
+    if [[ $(mongo admin --host "${peer}" "${admin_creds[@]}" "${ssl_args[@]}" --quiet --eval "rs.status().myState") == "1" ]]; then
+        retry_until "${peer}" "db.isMaster().ismaster" "true"
+        log "Found primary: ${peer}"
+        primary="${peer}"
+        break
+    fi
+done
+
+if [[ "${primary}" = "${service_name}" ]]; then
+    log "This replica is already PRIMARY"
+elif [[ -n "${primary}" ]]; then
+    if [[ $(mongo admin --host "${primary}" "${admin_creds[@]}" "${ssl_args[@]}" --quiet --eval "rs.conf().members.findIndex(m => m.host == '${service_name}:${port}')") == "-1" ]]; then
+      log "Adding myself (${service_name}) to replica set..."
+      if (mongo admin --host "${primary}" "${admin_creds[@]}" "${ssl_args[@]}" --eval "rs.add('${service_name}')" | grep 'Quorum check failed'); then
+          log 'Quorum check failed, unable to join replicaset. Exiting prematurely.'
+          exit 1
+      fi
+    fi
+
+    sleep 3
+    log 'Waiting for replica to reach SECONDARY state...'
+    retry_until "${service_name}" "rs.status().myState" "2"
+    log '✓ Replica reached SECONDARY state.'
+
+elif (mongo "${ssl_args[@]}" --eval "rs.status()" | grep "no replset config has been received"); then
+    log "Initiating a new replica set with myself ($service_name)..."
+    mongo "${ssl_args[@]}" --eval "rs.initiate({'_id': '$replica_set', 'members': [{'_id': 0, 'host': '$service_name'}]})"
+
+    sleep 3
+    log 'Waiting for replica to reach PRIMARY state...'
+    retry_until "localhost" "db.isMaster().ismaster" "true"
+    primary="${service_name}"
+    log '✓ Replica reached PRIMARY state.'
+
+    if [[ "${AUTH}" == "true" ]]; then
+        log "Creating admin user..."
+        mongo admin "${ssl_args[@]}" --eval "db.createUser({user: '${admin_user}', pwd: '${admin_password}', roles: [{role: 'root', db: 'admin'}]})"
+    fi
+fi
+
+# User creation
+if [[ -n "${primary}" && "$AUTH" == "true" && "$METRICS" == "true" ]]; then
+    metric_user_count=$(mongo admin --host "${primary}" "${admin_creds[@]}" "${ssl_args[@]}" --eval "db.system.users.find({user: '${metrics_user}'}).count()" --quiet)
+    if [[ "${metric_user_count}" == "0" ]]; then
+        log "Creating clusterMonitor user..."
+        mongo admin --host "${primary}" "${admin_creds[@]}" "${ssl_args[@]}" --eval "db.createUser({user: '${metrics_user}', pwd: '${metrics_password}', roles: [{role: 'clusterMonitor', db: 'admin'}, {role: 'read', db: 'local'}]})"
+    fi
+fi
+
+log "MongoDB bootstrap complete"
+exit 0
+

charts/mongodb-replicaset/v3.9.6/install/.dockerignore

+Makefile
\ No newline at end of file

charts/mongodb-replicaset/v3.9.6/install/Dockerfile

+# Copyright 2016 The Kubernetes Authors All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+FROM alpine:3.8
+
+LABEL maintainer="Reinhard Nägele <unguiculus@gmail.com>"
+
+RUN apk update && apk add bash openssl && wget -qO /peer-finder http://storage.googleapis.com/kubernetes-release/pets/peer-finder
+
+ENTRYPOINT ["/install.sh"]
+
+COPY install.sh /
+
+RUN chmod -c 755 /install.sh /peer-finder

charts/mongodb-replicaset/v3.9.6/install/Makefile

+# Copyright 2016 The Kubernetes Authors All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+all: push
+
+TAG = 0.7
+PREFIX = unguiculus/mongodb-install
+
+build:
+	docker build -t $(PREFIX):$(TAG) .
+
+push: build
+	docker push $(PREFIX):$(TAG)
+
+clean:
+	docker rmi $(PREFIX):$(TAG)

charts/mongodb-replicaset/v3.9.6/install/install.sh

+#!/usr/bin/env bash
+
+# Copyright 2016 The Kubernetes Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# This volume is assumed to exist and is shared with the peer-finder
+# init container. It contains on-start/change configuration scripts.
+WORKDIR_VOLUME="/work-dir"
+
+for i in "$@"; do
+    case "$i" in
+        -w=*|--work-dir=*)
+            WORKDIR_VOLUME="${i#*=}"
+            shift
+            ;;
+        *)
+            # unknown option
+            ;;
+    esac
+done
+
+echo Installing config scripts into "${WORKDIR_VOLUME}"
+
+mkdir -p "${WORKDIR_VOLUME}"
+cp /peer-finder "${WORKDIR_VOLUME}"/

charts/mongodb-replicaset/v3.9.6/questions.yml

+categories:
+- Database
+- NoSQL
+labels:
+  io.cattle.role: project # options are cluster/project
+questions:
+- variable: defaultImage
+  default: true
+  description: "Use default Docker images"
+  label: Use Default Images
+  type: boolean
+  show_subquestion_if: false
+  group: "Container Images"
+  subquestions:
+  - variable: image.repository
+    default: "ranchercharts/mongo"
+    description: "MongoDB image name"
+    type: string
+    label: MongoDB Image Name
+  - variable: image.tag
+    default: "3.6"
+    description: "MongoDB image tag"
+    type: string
+    label: Image Tag
+  - variable: installImage.repository
+    default: "ranchercharts/unguiculus-mongodb-install"
+    description: "Image name for the install container"
+    type: string
+    label: Init-Container Image Name
+  - variable: installImage.tag
+    default: "0.7"
+    description: "Image tag for the install container"
+    type: string
+    label: Init-Container Image Tag
+  - variable: copyConfigImage.repository
+    default: "ranchercharts/busybox"
+    description: "Image name for the CopyConfig container"
+    type: string
+    label: Copy Config Image Name
+  - variable: copyConfigImage.tag
+    default: "1.29.3"
+    description: "Image tag for the CopyConfig container"
+    type: string
+    label: Copy Config Image Tag
+- variable: replicas
+  default: 3
+  description: "Number of replicas in the replica set"
+  type: int
+  min: 3
+  max: 12
+  label: Number of Replicas
+  required: true
+  group: "MongoDB Settings"
+- variable: port
+  default: "27017"
+  description: "MongoDB port"
+  type: string
+  label: MongoDB port
+  required: true
+  group: "MongoDB Settings"
+- variable: replicaSetName
+  default: "rs0"
+  description: "The name of the replica set"
+  type: string
+  label: ReplicaSet Name
+  required: true
+  group: "MongoDB Settings"
+- variable: auth.enabled
+  default: true
+  description: "If true, keyfile access control is enabled"
+  type: boolean
+  label: Enable Auth 
+  required: true
+  show_subquestion_if: true
+  group: "MongoDB Settings"
+  subquestions:
+  - variable: auth.key
+    default: "myauthkey"
+    description: "Key for internal authentication, https://docs.mongodb.com/v3.0/tutorial/enable-internal-authentication/"
+    type: string
+    label: Auth Key
+    required: true
+  - variable: auth.adminUser
+    default: "admin"
+    description: "MongoDB admin user"
+    type: string
+    label: MongoDB Admin User
+    required: true
+  - variable: auth.adminPassword
+    default: ""
+    description: "MongoDB admin password"
+    type: password
+    label: MongoDB Admin Password
+    required: true
+- variable: persistentVolume.enabled
+  default: false
+  description: "Enable persistent volume for MongoDB"
+  type: boolean
+  required: true
+  label: MongoDB Persistent Volume Enabled
+  show_subquestion_if: true
+  group: "Persistent Volume"
+  subquestions:
+  - variable: persistentVolume.size
+    default: "10Gi"
+    description: "MongoDB Persistent Volume Size"
+    type: string
+    label: MongoDB Volume Size
+  - variable: persistentVolume.storageClass
+    default: ""
+    description: "If unndefined or null, uses the default StorageClass. Defaults to null."
+    type: storageclass
+    label: Storage Class for MongoDB

charts/mongodb-replicaset/v3.9.6/templates/NOTES.txt

+1. After the statefulset is created completely, one can check which instance is primary by running:
+
+    $ for ((i = 0; i < {{ .Values.replicas }}; ++i)); do kubectl exec --namespace {{ .Release.Namespace }} {{ template "mongodb-replicaset.fullname" . }}-$i -- sh -c 'mongo --eval="printjson(rs.isMaster())"'; done
+
+2. One can insert a key into the primary instance of the mongodb replica set by running the following:
+    MASTER_POD_NAME must be replaced with the name of the master found from the previous step.
+
+    $ kubectl exec --namespace {{ .Release.Namespace }} MASTER_POD_NAME -- mongo --eval="printjson(db.test.insert({key1: 'value1'}))"
+
+3. One can fetch the keys stored in the primary or any of the slave nodes in the following manner.
+    POD_NAME must be replaced by the name of the pod being queried.
+
+    $ kubectl exec --namespace {{ .Release.Namespace }} POD_NAME -- mongo --eval="rs.slaveOk(); db.test.find().forEach(printjson)"
+

charts/mongodb-replicaset/v3.9.6/templates/_helpers.tpl

+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "mongodb-replicaset.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "mongodb-replicaset.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "mongodb-replicaset.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create the name for the admin secret.
+*/}}
+{{- define "mongodb-replicaset.adminSecret" -}}
+    {{- if .Values.auth.existingAdminSecret -}}
+        {{- .Values.auth.existingAdminSecret -}}
+    {{- else -}}
+        {{- template "mongodb-replicaset.fullname" . -}}-admin
+    {{- end -}}
+{{- end -}}
+
+{{- define "mongodb-replicaset.metricsSecret" -}}
+    {{- if .Values.auth.existingMetricsSecret -}}
+        {{- .Values.auth.existingMetricsSecret -}}
+    {{- else -}}
+        {{- template "mongodb-replicaset.fullname" . -}}-metrics
+    {{- end -}}
+{{- end -}}
+
+
+{{/*
+Create the name for the key secret.
+*/}}
+{{- define "mongodb-replicaset.keySecret" -}}
+    {{- if .Values.auth.existingKeySecret -}}
+        {{- .Values.auth.existingKeySecret -}}
+    {{- else -}}
+        {{- template "mongodb-replicaset.fullname" . -}}-keyfile
+    {{- end -}}
+{{- end -}}

charts/mongodb-replicaset/v3.9.6/templates/mongodb-admin-secret.yaml

+{{- if and (.Values.auth.enabled) (not .Values.auth.existingAdminSecret) -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.adminSecret" . }}
+type: Opaque
+data:
+  user: {{ .Values.auth.adminUser | b64enc }}
+  password: {{ .Values.auth.adminPassword | b64enc }}
+{{- end -}}

charts/mongodb-replicaset/v3.9.6/templates/mongodb-ca-secret.yaml

+{{- if .Values.tls.enabled -}}
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/tls
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.fullname" . }}-ca
+data:
+  tls.key: {{ .Values.tls.cakey }}
+  tls.crt: {{ .Values.tls.cacert }}
+{{- end -}}

charts/mongodb-replicaset/v3.9.6/templates/mongodb-init-configmap.yaml

+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.fullname" . }}-init
+data:
+  on-start.sh: |
+{{ .Files.Get "init/on-start.sh" | indent 4 }}
+{{- if .Values.initMongodStandalone }}
+  initMongodStandalone.js: |
+{{ .Values.initMongodStandalone | indent 4 }}
+{{- end }}
+

charts/mongodb-replicaset/v3.9.6/templates/mongodb-keyfile-secret.yaml

+{{- if and (.Values.auth.enabled) (not .Values.auth.existingKeySecret) -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.keySecret" . }}
+type: Opaque
+data:
+  key.txt: {{ .Values.auth.key | b64enc }}
+{{- end -}}

charts/mongodb-replicaset/v3.9.6/templates/mongodb-metrics-secret.yaml

+{{- if and (.Values.auth.enabled) (not .Values.auth.existingMetricsSecret) (.Values.metrics.enabled) -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.metricsSecret" . }}
+type: Opaque
+data:
+  user: {{ .Values.auth.metricsUser | b64enc }}
+  password: {{ .Values.auth.metricsPassword | b64enc }}
+{{- end -}}

charts/mongodb-replicaset/v3.9.6/templates/mongodb-mongodb-configmap.yaml

+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.fullname" . }}-mongodb
+data:
+  mongod.conf: |
+{{ toYaml .Values.configmap | indent 4 }}

charts/mongodb-replicaset/v3.9.6/templates/mongodb-poddisruptionbudget.yaml

+{{- if .Values.podDisruptionBudget -}}
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.fullname" . }}
+spec:
+  selector:
+    matchLabels:
+      app: {{ template "mongodb-replicaset.name" . }}
+      release: {{ .Release.Name }}
+{{ toYaml .Values.podDisruptionBudget | indent 2 }}
+{{- end -}}

charts/mongodb-replicaset/v3.9.6/templates/mongodb-service-client.yaml

+# A headless service for client applications to use
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+  {{- if .Values.serviceAnnotations }}
+{{ toYaml .Values.serviceAnnotations | indent 4 }}
+  {{- end }}
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.fullname" . }}-client
+spec:
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    - name: mongodb
+      port: {{ .Values.port }}
+{{- if .Values.metrics.enabled }}
+    - name: metrics
+      port: {{ .Values.metrics.port }}
+      targetPort: metrics
+{{- end }}
+  selector:
+    app: {{ template "mongodb-replicaset.name" . }}
+    release: {{ .Release.Name }}
+

charts/mongodb-replicaset/v3.9.6/templates/mongodb-service.yaml

+# A headless service to create DNS records for discovery purposes. Use the -client service to connect applications
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ template "mongodb-replicaset.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+{{- if .Values.extraLabels }}
+{{ toYaml .Values.extraLabels | indent 4 }}
+{{- end }}
+  name: {{ template "mongodb-replicaset.fullname" . }}
+spec:
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    - name: mongodb
+      port: {{ .Values.port }}
+  publishNotReadyAddresses: true
+  selector:
+    app: {{ template "mongodb-replicaset.name" . }}
+    release: {{ .Release.Name }}

charts/mongodb-replicaset/v3.9.6/templates/tests/mongodb-up-test-configmap.yaml

+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+  name: {{ template "mongodb-replicaset.fullname" . }}-tests
+data:
+  mongodb-up-test.sh: |
+{{ .Files.Get "tests/mongodb-up-test.sh" | indent 4 }}

charts/mongodb-replicaset/v3.9.6/templates/tests/mongodb-up-test-pod.yaml

+apiVersion: v1
+kind: Pod
+metadata:
+  labels:
+    app: {{ template "mongodb-replicaset.name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+  name: {{ template "mongodb-replicaset.fullname" . }}-test
+  annotations:
+    "helm.sh/hook": test-success
+spec:
+  initContainers:
+    - name: test-framework
+      image: dduportal/bats:0.4.0
+      command:
+        - bash
+        - -c
+        - |
+          set -ex
+          # copy bats to tools dir
+          cp -R /usr/local/libexec/ /tools/bats/
+      volumeMounts:
+        - name: tools
+          mountPath: /tools
+  containers:
+    - name: mongo
+      image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+      command:
+        - /tools/bats/bats
+        - -t
+        - /tests/mongodb-up-test.sh
+      env:
+        - name: FULL_NAME
+          value: {{ template "mongodb-replicaset.fullname" . }}
+        - name: REPLICAS
+          value: "{{ .Values.replicas }}"
+      {{- if .Values.auth.enabled }}
+        - name: AUTH
+          value: "true"
+        - name: ADMIN_USER
+          valueFrom:
+            secretKeyRef:
+              name: "{{ template "mongodb-replicaset.adminSecret" . }}"
+              key: user
+        - name: ADMIN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: "{{ template "mongodb-replicaset.adminSecret" . }}"
+              key: password
+      {{- end }}
+      volumeMounts:
+        - name: tools
+          mountPath: /tools
+        - name: tests
+          mountPath: /tests
+  volumes:
+    - name: tools
+      emptyDir: {}
+    - name: tests
+      configMap:
+        name: {{ template "mongodb-replicaset.fullname" . }}-tests
+  restartPolicy: Never

charts/mongodb-replicaset/v3.9.6/test.sh

+#! /bin/bash
+
+# Copyright 2016 The Kubernetes Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+NS="${RELEASE_NAMESPACE:-default}"
+POD_NAME="${RELEASE_NAME:-mongo}-mongodb-replicaset"
+
+MONGOCACRT=/ca/tls.crt
+MONGOPEM=/work-dir/mongo.pem
+if [ -f $MONGOPEM ]; then
+    MONGOARGS="--ssl --sslCAFile $MONGOCACRT --sslPEMKeyFile $MONGOPEM"
+fi
+
+for i in $(seq 0 2); do
+    pod="${POD_NAME}-$i"
+    kubectl exec --namespace $NS $pod -- sh -c 'mongo '"$MONGOARGS"' --eval="printjson(rs.isMaster())"' | grep '"ismaster" : true'
+
+    if [ $? -eq 0 ]; then
+        echo "Found master: $pod"
+        MASTER=$pod
+        break
+    fi
+done
+
+kubectl exec --namespace $NS $MASTER -- mongo "$MONGOARGS" --eval='printjson(db.test.insert({"status": "success"}))'
+
+# TODO: find maximum duration to wait for slaves to be up-to-date with master.
+sleep 2
+
+for i in $(seq 0 2); do
+    pod="${POD_NAME}-$i"
+    if [[ $pod != $MASTER ]]; then
+        echo "Reading from slave: $pod"
+        kubectl exec --namespace $NS $pod -- mongo "$MONGOARGS" --eval='rs.slaveOk(); db.test.find().forEach(printjson)'
+    fi
+done

charts/mongodb-replicaset/v3.9.6/tests/mongodb-up-test.sh

+#!/usr/bin/env bash
+
+MONGOCACRT=/ca/tls.crt
+MONGOPEM=/work-dir/mongo.pem
+
+MONGOARGS="--quiet"
+
+if [ -f "$MONGOPEM" ]; then
+    MONGOARGS="$MONGOARGS --ssl --sslCAFile $MONGOCACRT --sslPEMKeyFile $MONGOPEM"
+fi
+
+if [[ "${AUTH}" == "true" ]]; then
+    MONGOARGS="$MONGOARGS --username $ADMIN_USER --password $ADMIN_PASSWORD --authenticationDatabase admin"
+fi
+
+pod_name() {
+    local full_name="${FULL_NAME?Environment variable FULL_NAME not set}"
+    local index="$1"
+    echo "$full_name-$index.$full_name"
+}
+
+replicas() {
+    echo "${REPLICAS?Environment variable REPLICAS not set}"
+}
+
+master_pod() {
+    for ((i = 0; i < $(replicas); ++i)); do
+        response=$(mongo $MONGOARGS "--host=$(pod_name "$i")" "--eval=rs.isMaster().ismaster")
+        if [[ "$response" == "true" ]]; then
+            pod_name "$i"
+            break
+        fi
+    done
+}
+
+setup() {
+    local ready=0
+    until [[ "$ready" -eq $(replicas) ]]; do
+        echo "Waiting for application to become ready" >&2
+        sleep 1
+
+        for ((i = 0; i < $(replicas); ++i)); do
+            response=$(mongo $MONGOARGS "--host=$(pod_name "$i")" "--eval=rs.status().ok" || true)
+            if [[ "$response" -eq 1 ]]; then
+                ready=$((ready + 1))
+            fi
+        done
+    done
+}
+
+@test "Testing mongodb client is executable" {
+    mongo -h
+    [ "$?" -eq 0 ]
+}
+
+@test "Connect mongodb client to mongodb pods" {
+    for ((i = 0; i < $(replicas); ++i)); do
+        response=$(mongo $MONGOARGS "--host=$(pod_name "$i")" "--eval=rs.status().ok")
+        if [[ ! "$response" -eq 1 ]]; then
+            exit 1
+        fi
+    done
+}
+
+@test "Write key to primary" {
+    response=$(mongo $MONGOARGS --host=$(master_pod) "--eval=db.test.insert({\"abc\": \"def\"}).nInserted")
+    if [[ ! "$response" -eq 1 ]]; then
+        exit 1
+    fi
+}
+
+@test "Read key from slaves" {
+    # wait for slaves to catch up
+    sleep 10
+
+    for ((i = 0; i < $(replicas); ++i)); do
+        response=$(mongo $MONGOARGS --host=$(pod_name "$i") "--eval=rs.slaveOk(); db.test.find({\"abc\":\"def\"})")
+        if [[ ! "$response" =~ .*def.* ]]; then
+            exit 1
+        fi
+    done
+
+    # Clean up a document after test
+    mongo $MONGOARGS --host=$(master_pod) "--eval=db.test.deleteMany({\"abc\": \"def\"})"
+}

charts/mongodb-replicaset/v3.9.6/values.yaml

+replicas: 3
+port: 27017
+
+replicaSetName: rs0
+
+podDisruptionBudget: {}
+  # maxUnavailable: 1
+  # minAvailable: 2
+
+auth:
+  enabled: false
+  # adminUser: username
+  # adminPassword: password
+  # metricsUser: metrics
+  # metricsPassword: password
+  # key: keycontent
+  # existingKeySecret:
+  # existingAdminSecret:
+  # existingMetricsSecret:
+
+## Optionally specify an array of imagePullSecrets.
+## Secrets must be manually created in the namespace.
+## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+##
+imagePullSecrets: []
+#   - myRegistrKeySecretName
+
+# Specs for the Docker image for the init container that establishes the replica set
+installImage:
+  repository: ranchercharts/unguiculus-mongodb-install
+  tag: 0.7
+  pullPolicy: IfNotPresent
+
+# Specs for the Docker image for the copyConfig init container
+copyConfigImage:
+  repository: ranchercharts/busybox
+  tag: 1.29.3
+  pullPolicy: IfNotPresent
+
+# Specs for the MongoDB image
+image:
+  repository: ranchercharts/mongo
+  tag: 3.6
+  pullPolicy: IfNotPresent
+
+# Additional environment variables to be set in the container
+extraVars: {}
+# - name: TCMALLOC_AGGRESSIVE_DECOMMIT
+#   value: "true"
+
+# Prometheus Metrics Exporter
+metrics:
+  enabled: false
+  image:
+    repository: ranchercharts/ssalaues-mongodb-exporter
+    tag: 0.6.1
+    pullPolicy: IfNotPresent
+  port: 9216
+  path: "/metrics"
+  socketTimeout: 3s
+  syncTimeout: 1m
+  prometheusServiceDiscovery: true
+  resources: {}
+
+# Annotations to be added to MongoDB pods
+podAnnotations: {}
+
+securityContext:
+  enabled: true
+  runAsUser: 999
+  fsGroup: 999
+  runAsNonRoot: true
+
+init:
+  resources: {}
+  timeout: 900
+
+resources: {}
+# limits:
+#   cpu: 500m
+#   memory: 512Mi
+# requests:
+#   cpu: 100m
+#   memory: 256Mi
+
+## Node selector
+## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
+nodeSelector: {}
+
+affinity: {}
+
+tolerations: []
+
+extraLabels: {}
+
+# priorityClassName: ""
+
+persistentVolume:
+  enabled: true
+  ## mongodb-replicaset data Persistent Volume Storage Class
+  ## If defined, storageClassName: <storageClass>
+  ## If set to "-", storageClassName: "", which disables dynamic provisioning
+  ## If undefined (the default) or set to null, no storageClassName spec is
+  ##   set, choosing the default provisioner.  (gp2 on AWS, standard on
+  ##   GKE, AWS & OpenStack)
+  ##
+  # storageClass: "-"
+  accessModes:
+    - ReadWriteOnce
+  size: 10Gi
+  annotations: {}
+
+# Annotations to be added to the service
+serviceAnnotations: {}
+
+terminationGracePeriodSeconds: 30
+
+tls:
+  # Enable or disable MongoDB TLS support
+  enabled: false
+  # Please generate your own TLS CA by generating it via:
+  # $ openssl genrsa -out ca.key 2048
+  # $ openssl req -x509 -new -nodes -key ca.key -days 10000 -out ca.crt -subj "/CN=mydomain.com"
+  # After that you can base64 encode it and paste it here:
+  # $ cat ca.key | base64 -w0
+  # cacert:
+  # cakey:
+
+# Entries for the MongoDB config file
+configmap: {}
+
+# Javascript code to execute on each replica at initContainer time
+# This is the recommended way to create indexes on replicasets.
+# Below is an example that creates indexes in foreground on each replica in standalone mode.
+# ref: https://docs.mongodb.com/manual/tutorial/build-indexes-on-replica-sets/
+# initMongodStandalone: |+
+#   db = db.getSiblingDB("mydb")
+#   db.my_users.createIndex({email: 1})
+
+# Readiness probe
+readinessProbe:
+  initialDelaySeconds: 5
+  timeoutSeconds: 1
+  failureThreshold: 3
+  periodSeconds: 10
+  successThreshold: 1
+
+# Liveness probe
+livenessProbe:
+  initialDelaySeconds: 30
+  timeoutSeconds: 5
+  failureThreshold: 3
+  periodSeconds: 10
+  successThreshold: 1