mirror of
https://github.com/outbackdingo/patroni.git
synced 2026-01-27 18:20:05 +00:00
3341c898ff
The only python-etcd3 client working directly via gRPC still supports only a single endpoint, which is not very nice for high-availability. Since Patroni is already using a heavily hacked version of python-etcd with smart retries and auto-discovery out-of-the-box, I decided to enhance the existing code with limited support of v3 protocol via gRPC-gateway. Unfortunately, watches via gRPC-gateway requires us to open and keep the second connection to the etcd. Known limitations: * The very minimal supported version is 3.0.4. On earlier versions transactions don't work due to bugs in grpc-gateway. Without transactions we can't do atomic operations, i.e. leader locks. * Watches work only starting from 3.1.0 * Authentication works only starting from 3.3.0 * gRPC-gateway does not support authentication using TLS Common Name. This is because gRPC-proxy terminates TLS from its client so all the clients share a cert of the proxy: https://github.com/etcd-io/etcd/blob/master/Documentation/op-guide/authentication.md#using-tls-common-name
61 lines
2.4 KiB
Bash
Executable File
61 lines
2.4 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
if [ -f /a.tar.xz ]; then
|
|
echo "decompressing image..."
|
|
sudo tar xpJf /a.tar.xz -C / > /dev/null 2>&1
|
|
sudo rm /a.tar.xz
|
|
sudo ln -snf dash /bin/sh
|
|
fi
|
|
|
|
readonly PATRONI_SCOPE=${PATRONI_SCOPE:-batman}
|
|
PATRONI_NAMESPACE=${PATRONI_NAMESPACE:-/service}
|
|
readonly PATRONI_NAMESPACE=${PATRONI_NAMESPACE%/}
|
|
readonly DOCKER_IP=$(hostname --ip-address)
|
|
|
|
case "$1" in
|
|
haproxy)
|
|
haproxy -f /etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -D
|
|
CONFD="confd -prefix=$PATRONI_NAMESPACE/$PATRONI_SCOPE -interval=10 -backend"
|
|
if [ ! -z "$PATRONI_ZOOKEEPER_HOSTS" ]; then
|
|
while ! /usr/share/zookeeper/bin/zkCli.sh -server $PATRONI_ZOOKEEPER_HOSTS ls /; do
|
|
sleep 1
|
|
done
|
|
exec dumb-init $CONFD zookeeper -node $PATRONI_ZOOKEEPER_HOSTS
|
|
else
|
|
while ! etcdctl cluster-health 2> /dev/null; do
|
|
sleep 1
|
|
done
|
|
exec dumb-init $CONFD etcdv3 -node $(echo $ETCDCTL_ENDPOINTS | sed 's/,/ -node /g')
|
|
fi
|
|
;;
|
|
etcd)
|
|
exec "$@" -advertise-client-urls http://$DOCKER_IP:2379
|
|
;;
|
|
zookeeper)
|
|
exec /usr/share/zookeeper/bin/zkServer.sh start-foreground
|
|
;;
|
|
esac
|
|
|
|
## We start an etcd
|
|
if [ -z "$PATRONI_ETCD3_HOSTS" ] && [ -z "$PATRONI_ZOOKEEPER_HOSTS" ]; then
|
|
export PATRONI_ETCD_URL="http://127.0.0.1:2379"
|
|
etcd --data-dir /tmp/etcd.data -advertise-client-urls=$PATRONI_ETCD_URL -listen-client-urls=http://0.0.0.0:2379 > /var/log/etcd.log 2> /var/log/etcd.err &
|
|
fi
|
|
|
|
export PATRONI_SCOPE
|
|
export PATRONI_NAMESPACE
|
|
export PATRONI_NAME="${PATRONI_NAME:-$(hostname)}"
|
|
export PATRONI_RESTAPI_CONNECT_ADDRESS="$DOCKER_IP:8008"
|
|
export PATRONI_RESTAPI_LISTEN="0.0.0.0:8008"
|
|
export PATRONI_admin_PASSWORD="${PATRONI_admin_PASSWORD:-admin}"
|
|
export PATRONI_admin_OPTIONS="${PATRONI_admin_OPTIONS:-createdb, createrole}"
|
|
export PATRONI_POSTGRESQL_CONNECT_ADDRESS="$DOCKER_IP:5432"
|
|
export PATRONI_POSTGRESQL_LISTEN="0.0.0.0:5432"
|
|
export PATRONI_POSTGRESQL_DATA_DIR="${PATRONI_POSTGRESQL_DATA_DIR:-$PGDATA}"
|
|
export PATRONI_REPLICATION_USERNAME="${PATRONI_REPLICATION_USERNAME:-replicator}"
|
|
export PATRONI_REPLICATION_PASSWORD="${PATRONI_REPLICATION_PASSWORD:-replicate}"
|
|
export PATRONI_SUPERUSER_USERNAME="${PATRONI_SUPERUSER_USERNAME:-postgres}"
|
|
export PATRONI_SUPERUSER_PASSWORD="${PATRONI_SUPERUSER_PASSWORD:-postgres}"
|
|
|
|
exec python3 /patroni.py postgres0.yml
|