From 68deed44d3209a49e7d6ebc880335bf0efe4a676 Mon Sep 17 00:00:00 2001 From: koh-satoh-wpg Date: Wed, 28 Feb 2024 05:09:15 +0900 Subject: [PATCH] Run frigate & place another space before the values comment --- charts/trino/README.md | 8 +- charts/trino/my-values.yaml | 464 ++++++++++++++++++++++++++++++++++++ charts/trino/values.yaml | 8 +- 3 files changed, 472 insertions(+), 8 deletions(-) create mode 100644 charts/trino/my-values.yaml diff --git a/charts/trino/README.md b/charts/trino/README.md index 446a03ca..57019345 100644 --- a/charts/trino/README.md +++ b/charts/trino/README.md @@ -72,8 +72,8 @@ The following table lists the configurable parameters of the Trino chart and the | `coordinator.tolerations` | | `[]` | | `coordinator.affinity` | | `{}` | | `coordinator.additionalConfigFiles` | | `{}` | -| `coordinator.additionalVolumes` | | `[]` | -| `coordinator.additionalVolumeMounts` | | `[]` | +| `coordinator.additionalVolumes` | One or more additional volumes to add to the coordinator. | `[]` | +| `coordinator.additionalVolumeMounts` | One or more additional volume mounts to add to the coordinator. | `[]` | | `coordinator.annotations` | | `{}` | | `coordinator.labels` | | `{}` | | `coordinator.secretMounts` | | `[]` | @@ -91,8 +91,8 @@ The following table lists the configurable parameters of the Trino chart and the | `worker.tolerations` | | `[]` | | `worker.affinity` | | `{}` | | `worker.additionalConfigFiles` | | `{}` | -| `worker.additionalVolumes` | | `[]` | -| `worker.additionalVolumeMounts` | | `[]` | +| `worker.additionalVolumes` | One or more additional volume mounts to add to all workers. | `[]` | +| `worker.additionalVolumeMounts` | One or more additional volume mounts to add to all workers. | `[]` | | `worker.annotations` | | `{}` | | `worker.labels` | | `{}` | | `worker.secretMounts` | | `[]` | diff --git a/charts/trino/my-values.yaml b/charts/trino/my-values.yaml new file mode 100644 index 00000000..f40919c7 --- /dev/null +++ b/charts/trino/my-values.yaml @@ -0,0 +1,464 @@ +# Default values for trino. +# This is a YAML-formatted file. +# Declare variables to be passed into your templates. + +image: + repository: trinodb/trino + pullPolicy: IfNotPresent + # Overrides the image tag whose default is the chart version. + # Same value as Chart.yaml#appVersion + tag: 432 + +imagePullSecrets: + - name: registry-credentials + +server: + workers: 2 + node: + environment: production + dataDir: /data/trino + pluginDir: /usr/lib/trino/plugin + log: + trino: + level: INFO + config: + path: /etc/trino + http: + port: 8080 + https: + enabled: false + port: 8443 + keystore: + path: "" + # Trino supports multiple authentication types: PASSWORD, CERTIFICATE, OAUTH2, JWT, KERBEROS + # For more info: https://trino.io/docs/current/security/authentication-types.html + authenticationType: "" + query: + maxMemory: "4GB" + exchangeManager: + name: "filesystem" + baseDir: "/tmp/trino-local-file-system-exchange-manager" + workerExtraConfig: "" + coordinatorExtraConfig: "" + autoscaling: + enabled: false + maxReplicas: 5 + targetCPUUtilizationPercentage: 50 + behavior: {} + # scaleDown: + # stabilizationWindowSeconds: 300 + # policies: + # - type: Percent + # value: 100 + # periodSeconds: 15 + # scaleUp: + # stabilizationWindowSeconds: 0 + # policies: + # - type: Percent + # value: 100 + # periodSeconds: 15 + # - type: Pods + # value: 4 + # periodSeconds: 15 + # selectPolicy: Max + +accessControl: {} + # type: configmap + # refreshPeriod: 60s + # # Rules file is mounted to /etc/trino/access-control + # configFile: "rules.json" + # rules: + # rules.json: |- + # { + # "catalogs": [ + # { + # "user": "admin", + # "catalog": "(mysql|system)", + # "allow": "all" + # }, + # { + # "group": "finance|human_resources", + # "catalog": "postgres", + # "allow": true + # }, + # { + # "catalog": "hive", + # "allow": "all" + # }, + # { + # "user": "alice", + # "catalog": "postgresql", + # "allow": "read-only" + # }, + # { + # "catalog": "system", + # "allow": "none" + # } + # ], + # "schemas": [ + # { + # "user": "admin", + # "schema": ".*", + # "owner": true + # }, + # { + # "user": "guest", + # "owner": false + # }, + # { + # "catalog": "default", + # "schema": "default", + # "owner": true + # } + # ] + # } + +resourceGroups: {} + # # Resource groups file is mounted to /etc/trino/resource-groups/resource-groups.json + # resourceGroupsConfig: |- + # { + # "rootGroups": [ + # { + # "name": "global", + # "softMemoryLimit": "80%", + # "hardConcurrencyLimit": 100, + # "maxQueued": 100, + # "schedulingPolicy": "fair", + # "jmxExport": true, + # "subGroups": [ + # { + # "name": "admin", + # "softMemoryLimit": "30%", + # "hardConcurrencyLimit": 20, + # "maxQueued": 10 + # }, + # { + # "name": "finance_human_resources", + # "softMemoryLimit": "20%", + # "hardConcurrencyLimit": 15, + # "maxQueued": 10 + # }, + # { + # "name": "general", + # "softMemoryLimit": "30%", + # "hardConcurrencyLimit": 20, + # "maxQueued": 10 + # }, + # { + # "name": "readonly", + # "softMemoryLimit": "10%", + # "hardConcurrencyLimit": 5, + # "maxQueued": 5 + # } + # ] + # } + # ], + # "selectors": [ + # { + # "user": "admin", + # "group": "global.admin" + # }, + # { + # "group": "finance|human_resources", + # "group": "global.finance_human_resources" + # }, + # { + # "user": "alice", + # "group": "global.readonly" + # }, + # { + # "group": "global.general" + # } + # ] + # } + + +additionalNodeProperties: {} + +additionalConfigProperties: {} + +additionalLogProperties: {} + +additionalExchangeManagerProperties: {} + +eventListenerProperties: {} + +additionalCatalogs: {} + +# Array of EnvVar (https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#envvar-v1-core) +env: [] + +# Array of EnvFromSource (https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#envfromsource-v1-core) +envFrom: [] + +initContainers: {} + # coordinator: + # - name: init-coordinator + # image: busybox:1.28 + # imagePullPolicy: IfNotPresent + # command: ['sh', '-c', "until nslookup myservice.$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace).svc.cluster.local; do echo waiting for myservice; sleep 2; done"] + # worker: + # - name: init-worker + # image: busybox:1.28 + # command: ['sh', '-c', 'echo The worker is running! && sleep 3600'] + +sidecarContainers: {} +# coordinator: +# - name: side-coordinator +# image: busybox:1.28 +# imagePullPolicy: IfNotPresent +# command: ['sleep', '1'] +# worker: +# - name: side-worker +# image: busybox:1.28 +# imagePullPolicy: IfNotPresent +# command: ['sleep', '1'] + +securityContext: + runAsUser: 1000 + runAsGroup: 1000 + +shareProcessNamespace: + coordinator: false + worker: false + +service: + type: ClusterIP + port: 8080 + +auth: {} + # Set username and password + # https://trino.io/docs/current/security/password-file.html#file-format + # passwordAuth: "username:encrypted-password-with-htpasswd" + # or set the name of a secret containing this file in the password.db key + # passwordAuthSecret: "trino-password-authentication" + # Set users' groups + # https://trino.io/docs/current/security/group-file.html#file-format + # refreshPeriod: 5s + # groups: "group_name:user_1,user_2,user_3" + +serviceAccount: + # Specifies whether a service account should be created + create: false + # The name of the service account to use. + # If not set and create is true, a name is generated using the fullname template + name: "" + # Annotations to add to the service account + annotations: {} + +secretMounts: [] + # - name: sample-secret + # secretName: sample-secret + # path: /secrets/sample.json + +coordinator: + jvm: + maxHeapSize: "8G" + gcMethod: + type: "UseG1GC" + g1: + heapRegionSize: "32M" + + config: + memory: + heapHeadroomPerNode: "" + query: + maxMemoryPerNode: "1GB" + + additionalJVMConfig: {} + + additionalExposedPorts: {} + + resources: {} + # We usually recommend not to specify default resources and to leave this as a conscious + # choice for the user. This also increases chances charts run on environments with little + # resources, such as Minikube. If you do want to specify resources, uncomment the following + # lines, adjust them as necessary, and remove the curly braces after 'resources:'. + # limits: + # cpu: 100m + # memory: 128Mi + # requests: + # cpu: 100m + # memory: 128Mi + + livenessProbe: {} + # initialDelaySeconds: 20 + # periodSeconds: 10 + # timeoutSeconds: 5 + # failureThreshold: 6 + # successThreshold: 1 + readinessProbe: {} + # initialDelaySeconds: 20 + # periodSeconds: 10 + # timeoutSeconds: 5 + # failureThreshold: 6 + # successThreshold: 1 + + nodeSelector: {} + + tolerations: [] + + affinity: {} + + additionalConfigFiles: {} + + additionalVolumes: + - name: token + projected: + sources: + - serviceAccountToken: + audience: https://iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL_ID/providers/PROVIDER_ID + expirationSeconds: 3600 + path: token + - name: workload-identity-credential-configuration + configMap: + name: CONFIGMAP_NAME + + additionalVolumeMounts: + - name: token + mountPath: "/var/run/service-account" + readOnly: true + - name: workload-identity-credential-configuration + mountPath: "/etc/workload-identity" + readOnly: true + + annotations: {} + + labels: {} + + secretMounts: [] + # - name: sample-secret + # secretName: sample-secret + # path: /secrets/sample.json + +worker: + jvm: + maxHeapSize: "8G" + gcMethod: + type: "UseG1GC" + g1: + heapRegionSize: "32M" + + config: + memory: + heapHeadroomPerNode: "" + query: + maxMemoryPerNode: "1GB" + + additionalJVMConfig: {} + + additionalExposedPorts: {} + + resources: {} + # We usually recommend not to specify default resources and to leave this as a conscious + # choice for the user. This also increases chances charts run on environments with little + # resources, such as Minikube. If you do want to specify resources, uncomment the following + # lines, adjust them as necessary, and remove the curly braces after 'resources:'. + # limits: + # cpu: 100m + # memory: 128Mi + # requests: + # cpu: 100m + # memory: 128Mi + + livenessProbe: {} + # initialDelaySeconds: 20 + # periodSeconds: 10 + # timeoutSeconds: 5 + # failureThreshold: 6 + # successThreshold: 1 + readinessProbe: {} + # initialDelaySeconds: 20 + # periodSeconds: 10 + # timeoutSeconds: 5 + # failureThreshold: 6 + # successThreshold: 1 + + nodeSelector: {} + + tolerations: [] + + affinity: {} + + additionalConfigFiles: {} + + additionalVolumes: + - name: token + projected: + sources: + - serviceAccountToken: + audience: https://iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL_ID/providers/PROVIDER_ID + expirationSeconds: 3600 + path: token + - name: workload-identity-credential-configuration + configMap: + name: CONFIGMAP_NAME + + additionalVolumeMounts: + - name: token + mountPath: "/var/run/service-account" + readOnly: true + - name: workload-identity-credential-configuration + mountPath: "/etc/workload-identity" + readOnly: true + + + annotations: {} + + labels: {} + + secretMounts: [] + # - name: sample-secret + # secretName: sample-secret + # path: /secrets/sample.json + +kafka: + mountPath: "/etc/trino/schemas" + tableDescriptions: {} + # Custom kafka table descriptions that will be mounted in mountPath + # testschema.json: |- + # { + # "tableName": "testtable", + # "schemaName": "testschema", + # "topicName": "testtopic", + # "key": { + # "dataFormat": "json", + # "fields": [ + # { + # "name": "_key", + # "dataFormat": "VARCHAR", + # "type": "VARCHAR", + # "hidden": "false" + # } + # ] + # }, + # "message": { + # "dataFormat": "json", + # "fields": [ + # { + # "name": "id", + # "mapping": "id", + # "type": "BIGINT" + # }, + # { + # "name": "test_field", + # "mapping": "test_field", + # "type": "VARCHAR" + # } + # ] + # } + # } +commonLabels: {} # Labels that get applied to every resource's metadata +ingress: + enabled: false + className: "" + annotations: {} + hosts: [] + # - host: trino.example.com + # paths: + # - path: / + # pathType: ImplementationSpecific + tls: [] + # - secretName: chart-example-tls + # hosts: + # - chart-example.local diff --git a/charts/trino/values.yaml b/charts/trino/values.yaml index 6c7f66a4..c422d495 100644 --- a/charts/trino/values.yaml +++ b/charts/trino/values.yaml @@ -302,11 +302,11 @@ coordinator: additionalConfigFiles: {} - additionalVolumes: [] # One or more additional volumes to add to the coordinator. + additionalVolumes: [] # One or more additional volumes to add to the coordinator. # - name: extras # emptyDir: {} - additionalVolumeMounts: [] # One or more additional volume mounts to add to the coordinator. + additionalVolumeMounts: [] # One or more additional volume mounts to add to the coordinator. # - name: extras # mountPath: /usr/share/extras # readOnly: true @@ -371,11 +371,11 @@ worker: additionalConfigFiles: {} - additionalVolumes: [] # One or more additional volume mounts to add to all workers. + additionalVolumes: [] # One or more additional volume mounts to add to all workers. # - name: extras # emptyDir: {} - additionalVolumeMounts: [] # One or more additional volume mounts to add to all workers. + additionalVolumeMounts: [] # One or more additional volume mounts to add to all workers. # - name: extras # mountPath: /usr/share/extras # readOnly: true