Merge pull request #756 from jamesongithub/jy/rancher3

Structure values.yaml file. Add csi storage options for aks/eks/gke. Document mssql-conf file. Add extra volume and extra volume mounts.

Author: amvin87-zz

linux/rancher/.gitignore

@@ -0,0 +1 @@
+jy-sql.yaml

linux/rancher/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.0.1
+version: 0.0.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

linux/rancher/questions.yml

@@ -1,10 +1,11 @@
 questions:
-  - variable: ACCEPT_EULA
-    label: ACCEPT_EULA
+  - variable: mssql.conf.eula.accepteula
+    label: Accept the SQL Server EULA
     # no current support for html
     # description: Accepts the SQL Server <a href="http://go.microsoft.com/fwlink/?LinkId=746388">EULA</a> (any value confirms acceptance).
     description: Accepts the SQL Server EULA (any value confirms acceptance). The EULA is posted @ http://go.microsoft.com/fwlink/?LinkId=746388
     required: true
+    default: true
     group: SQL Server options
 
   - variable: USE_PRODUCT_KEY
@@ -14,7 +15,7 @@ questions:
     default: false
     group: SQL Server options
 
-  - variable: MSSQL_PID
+  - variable: mssql.pid
     label: SQL Server Edition aka. MSSQL_PID
     description: Select a SQL Server Edition
     type: enum
@@ -25,18 +26,19 @@ questions:
       - Web
       - Standard
       - Enterprise
-    required: true      
+    required: true
+    default: Developer
     show_if: USE_PRODUCT_KEY=false
     group: SQL Server options
 
-  - variable: MSSQL_PID
+  - variable: mssql.pid
     label: SQL Server License Key
     description: Enter a Product Key of the format "#####-#####-#####-#####-#####"
     required: true
     show_if: USE_PRODUCT_KEY=true    
     group: SQL Server options
 
-  - variable: MSSQL_SA_PASSWORD
+  - variable: mssql.sa.password
     label: MSSQL SA user password
     description: Sets the SA user password. Password requirements @ https://docs.microsoft.com/en-us/sql/relational-databases/security/password-policy?view=sql-server-ver15#password-complexity
     type: password
@@ -47,10 +49,16 @@ questions:
     required: true
     group: SQL Server options
 
-  - variable: MSSQL_AGENT_ENABLED
+  - variable: mssql.conf.lcid
+    label: SQL Server Locale
+    description: Sets SQL Server Locale
+    group: SQL Server options
+
+  - variable: mssql.conf.sqlagent.enabled
     label: Enable SQL Server Agent
     description: Enables the SQL Server Agent
     type: boolean
+    default: true
     group: SQL Server options
 
   - variable: defaultContainerImage
@@ -60,44 +68,92 @@ questions:
     show_subquestion_if: false
     group: Container Image Options
     subquestions:
-      - variable: image.repository
-        default: mcr.microsoft.com/mssql/server
+      - variable: statefulset.template.spec.containers.sqlServer.image.repository
         description: Image Repository
         label: Image Repository
-      - variable: image.pullPolicy
-        default: IfNotPresent
+      - variable: statefulset.template.spec.containers.sqlServer.image.pullPolicy
         label: Image Pull Policy
         type: enum
         options: 
           - IfNotPresent
           - Always
           - Never
-      - variable: image.tag
-        default: 2019-latest
+      - variable: statefulset.template.spec.containers.sqlServer.image.tag
         label: Image Tag
-
-  - variable: replicas
-    description: Replicas of the SQL Server StatefulSet
-    label: Replicas
-    type: int
-    group: Kubernetes StatefulSet options
 
-  - variable: podSecurityContext.fsGroup
+  - variable: statefulset.template.spec.securityContext.fsGroup
     description: |
-      Specifies a supplementary group id for all processes of the container. 
+      Specifies a supplementary group id for all pod processes
       See https://kubernetes.io/docs/tasks/configure-pod-container/security-context for 
       additional details.
-    label: podSecurityContext.fsGroup
-    group: Kubernetes Pod options
+    label: statefulset.template.spec.securityContext.fsGroup
+    group: Kubernetes Statefulset options
 
-  - variable: containers.ports.containerPort
+  - variable: statefulset.template.spec.containers.sqlServer.ports.databaseEngineContainerPort
     description: >
-      Specifies containerPort for SQL Server
-    label: SQL Server Container Port
-    group: Kubernetes Pod Options
+      Specifies containerPort for SQL Server Database Engine
+    label: SQL Server Database Engine Container Port
+    group: Kubernetes Statefulset Options
 
-  - variable: service.port
+  - variable: service.spec.ports.sqlServerDatabasePort
     description: Kubernetes service port for SQL Server
     group: Kubernetes Service Options
     label: Kubernetes Service Port
     type: int
+
+  - variable: storageClass.provisioner
+    description: StorageClass provisioner for SQL Server
+    group: Kubernetes Storage Options
+    label: Kubernetes StorageClass Provisioner
+    type: enum
+    options:
+      - disk.csi.azure.com
+      - ebs.csi.aws.com
+      - pd.csi.storage.gke.io
+
+  - variable: storageClass.type
+    description: StorageClass Type for Azure Disk CSI. CSI Drivers are default after k8s v1.21
+    group: Kubernetes Storage Options
+    label: Kubernetes StorageClass Type
+    show_if: "storageClass.provisioner=disk.csi.azure.com"
+    type: enum
+    default: Standard_LRS
+    options:
+      - Standard_LRS
+      - Premium_LRS
+      - StandardSSD_LRS
+      - UltraSSD_LRS
+
+  - variable: storageClass.type
+    description: StorageClass Type for AWS EBS CSI. Install the csi driver on the target cluster first. https://docs.aws.amazon.com/eks/latest/userguide/managing-ebs-csi.html#adding-ebs-csi-eks-add-on
+    group: Kubernetes Storage Options
+    label: Kubernetes StorageClass Type
+    show_if: "storageClass.provisioner=ebs.csi.aws.com"
+    type: enum
+    default: standard
+    options:
+      - io1
+      - io2
+      - gp2
+      - gp3
+      - sc1
+      - st1
+      - standard
+  
+  - variable: storageClass.type
+    description: StorageClass Type for GCE PD CSI. CSI Driver are default after Linux clusters 1.18.10-gke.2100 or 1.19.3-gke.2100
+    group: Kubernetes Storage Options
+    label: Kubernetes StorageClass Type
+    show_if: "storageClass.provisioner=pd.csi.storage.gke.io"
+    type: enum
+    default: pd-standard
+    options:
+      - pd-standard
+      - pd-balanced
+      - pd-ssd
+      - pd-extreme
+
+  - variable: storage.size
+    description: Size for Storage Volume in Gibibytes (Gi)
+    group: Kubernetes Storage Options
+    label: Kubernetes Storage Size

linux/rancher/templates/configmap.yaml

@@ -0,0 +1,84 @@
+kind: ConfigMap 
+apiVersion: v1 
+metadata:
+  name: mssql
+data:
+  mssql.conf: |
+    [EULA]
+    accepteula = {{ .Values.mssql.conf.eula.accepteula }}
+    accepteulaml = {{ .Values.mssql.conf.eula.accepteulaml }}
+    
+    [coredump]
+    captureminiandfull = true
+    coredumptype = full
+    
+    [hadr]
+    hadrenabled = 1
+    
+    [language]
+    lcid = {{ .Values.mssql.conf.lcid }}
+
+    [sqlagent]
+    enabled = {{ .Values.mssql.conf.sqlagent.enabled }}
+
+
+# control.alternatewritethrough                           Enable optimized write through flush for O_DSYNC requests
+# control.hestacksize                                     Host extension stack size in KB
+# control.stoponguestprocessfault                         Stops the process if any guest process reports unhandled exception
+# control.writethrough                                    Use O_DSYNC for file flag write through requests
+# coredump.captureminiandfull                             Capture both mini and full core dumps
+# coredump.coredumptype                                   Core dump type to capture: mini, miniplus, filtered, full
+# distributedtransaction.allowonlysecurerpccalls          Configure secure only rpc calls for distributed transactions
+# distributedtransaction.fallbacktounsecurerpcifnecessary Configure security only rpc calls for distributed transactions
+# distributedtransaction.maxlogsize                       DTC log file size in MB. Default is 64MB
+# distributedtransaction.memorybuffersize                 Circular buffer size in which traces are stored. This size is in MB and default is 10MB
+# distributedtransaction.servertcpport                    MSDTC rpc server port
+# distributedtransaction.trace_cm                         Traces in the connection manager
+# distributedtransaction.trace_contact                    Traces the contact pool and contacts
+# distributedtransaction.trace_gateway                    Traces Gateway source
+# distributedtransaction.trace_log                        Log tracing
+# distributedtransaction.trace_misc                       Traces that cannot be categorized into the other categories
+# distributedtransaction.trace_proxy                      Traces that are generated in the MSDTC proxy
+# distributedtransaction.trace_svc                        Traces service and .exe file startup
+# distributedtransaction.trace_trace                      The trace infrastructure itself
+# distributedtransaction.trace_util                       Traces utility routines that are called from multiple locations
+# distributedtransaction.trace_xa                         XA Transaction Manager (XATM) tracing source
+# distributedtransaction.tracefilepath                    Folder in which trace files should be stored
+# distributedtransaction.turnoffrpcsecurity               Enable or disable RPC security for distributed transactions
+# errorlog.numerrorlogs                                   Number of error log maintained before cycling the log.
+# extensibility.datadirectories                           Colon separated directory paths available to sp_execute_external_script
+# extensibility.outboundnetworkaccess                     Enable outbound network access for sp_execute_external_script
+# filelocation.defaultbackupdir                           Default directory for backup files
+# filelocation.defaultdatadir                             Default directory for data files
+# filelocation.defaultdumpdir                             Default directory for crash dump files
+# filelocation.defaultlogdir                              Default directory for log files
+# filelocation.errorlogfile                               Error log file location
+# filelocation.masterdatafile                             Master database data file location
+# filelocation.masterlogfile                              Master database log file location
+# hadr.hadrenabled                                        Allow SQL Server to use availability groups for high availability and disaster recovery
+# language.lcid                                           Locale identifier for SQL Server to use (e.g. 1033 for US - English)
+# memory.disablememorypressure                            SQL Server disable memory pressure
+# memory.memory_optimized                                 Enable or disable SQL Server memory optimized features - persistent memory file enlightenment, memory protection
+# memory.memorylimitmb                                    SQL Server memory limit (megabytes)
+# network.disablesssd                                     Disable querying SSSD for AD account information and default to LDAP calls
+# network.enablekdcfromkrb5conf                           Enable looking up KDC information from krb5.conf
+# network.forceencryption                                 Force encryption of incoming client connections
+# network.forcesecureldap                                 Force using LDAPS to contact domain controller
+# network.ipaddress                                       IP address for incoming connections
+# network.kerberoscredupdatefrequency                     Time in seconds between checks for kerberos credentials that need to be updated
+# network.kerberoskeytabfile                              Kerberos keytab file location
+# network.privilegedadaccount                             Privileged AD user to use for AD authentication
+# network.rpcport                                         TCP port for Rpc endpoint mapper
+# network.tcpport                                         TCP port for incoming connections
+# network.tlscert                                         Path to certificate file for encrypting incoming client connections
+# network.tlsciphers                                      TLS ciphers allowed for encrypted incoming client connections
+# network.tlskey                                          Path to private key file for encrypting incoming client connections
+# network.tlsprotocols                                    TLS protocol versions allowed for encrypted incoming client connections
+# sqlagent.databasemailprofile                            SQL Agent Database Mail profile name
+# sqlagent.enabled                                        Enable or disable SQLAgent
+# sqlagent.errorlogfile                                   SQL Agent log file path
+# sqlagent.errorlogginglevel                              SQL Agent logging level bitmask - 1=Errors, 2=Warnings, 4=Info
+# sqlagent.startupwaitforalldb                            Set to 1 (default) if SqlAgent should wait for all databases on startup; set to 0 to wait for MSDB only
+# telemetry.customerfeedback                              Telemetry status
+# telemetry.userrequestedlocalauditdirectory              Directory for telemetry local audit cache
+# uncmapping.                                             Maps UNC path to a local path. (e.g. ./mssql-conf set uncmapping //servername/sharename /tmp/folder)

linux/rancher/templates/mssqlconfig.yaml

@@ -6,4 +6,4 @@ metadata:
     {{- include "sql-server-rancher.labels" . | nindent 4 }}
 type: Opaque
 data:
-  mssql_sa_password : {{ .Values.MSSQL_SA_PASSWORD | b64enc | quote }}
+  mssql_sa_password : {{ .Values.mssql.sa.password | b64enc | quote }}

linux/rancher/templates/sc.yaml

@@ -7,7 +7,7 @@ metadata:
 spec:
   clusterIP: None
   ports:
-    - port: {{ .Values.service.port }}
+    - port: {{ .Values.service.spec.ports.sqlServerDatabasePort }}
       targetPort: http
       protocol: TCP
   selector: