🎨 大部分的 make 指令

pkg/resource/es.yaml

@@ -0,0 +1,121 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: db-es
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: elasticsearch
+  namespace: db-es
+spec:
+  serviceName: elasticsearch
+  replicas: 1
+  selector:
+    matchLabels:
+      app: elasticsearch
+  template:
+    metadata:
+      labels:
+        app: elasticsearch
+    spec:
+      volumes:
+        - name: shared-data
+          emptyDir: {}
+      securityContext:
+        fsGroup: 1000
+      initContainers:
+        - name: fix-permissions
+          image: hub.yizhisec.com/hybridscope/v2/es-init-helper:alpine-3.22.2
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -c
+          args: 
+            - | 
+              #/bin/sh
+              cp -rf /data/plugins/* /app/shared/
+              chown -R 1000:1000 /usr/share/elasticsearch/data           
+          volumeMounts:
+            - name: es-data
+              mountPath: /usr/share/elasticsearch/data
+            - name: shared-data
+              mountPath: /app/shared
+          securityContext:
+            runAsUser: 0
+      containers:
+        - name: elasticsearch
+          image: hub.yizhisec.com/external/elasticsearch:7.17.28
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: discovery.type
+              value: single-node
+            - name: ES_JAVA_OPTS
+              value: "-Xms%dg -Xmx%dg"
+            - name: node.name
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
+          ports:
+            - containerPort: 9200
+              name: http
+            - containerPort: 9300
+              name: transport
+          volumeMounts:
+            - name: es-data
+              mountPath: /usr/share/elasticsearch/data
+            - name: shared-data
+              mountPath: /usr/share/elasticsearch/plugins
+          resources:
+            requests:
+              memory: "%dGi"
+              cpu: "%d"
+            limits:
+              memory: "%dGi"
+              cpu: "%d"
+  volumeClaimTemplates:
+    - metadata:
+        name: es-data
+      spec:
+        accessModes: ["ReadWriteOnce"]
+        storageClassName: longhorn
+        resources:
+          requests:
+            storage: %dGi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: es-service
+  namespace: db-es
+spec:
+  type: ClusterIP
+  selector:
+    app: elasticsearch
+  ports:
+    - name: http
+      protocol: TCP
+      port: 9200
+      targetPort: http
+    - name: transport
+      protocol: TCP
+      port: 9300
+      targetPort: transport
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: es-init-job
+  namespace: db-es
+spec:
+  template:
+    spec:
+      containers:
+        - name: es-init
+          image: hub.yizhisec.com/hybridscope/v2/es-init-helper:alpine-3.22.2
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - /data/create_index.sh
+      restartPolicy: Never
+  backoffLimit: 2